diff options
| author | Christian Brauner <brauner@kernel.org> | 2025-06-18 22:53:35 +0200 |
|---|---|---|
| committer | Christian Brauner <brauner@kernel.org> | 2025-06-19 14:28:23 +0200 |
| commit | 1a1ad73aa1a66787f05f7f10f686b74bab77be72 (patch) | |
| tree | 244b5cb07473757bebd07abb0166de64e2b737c2 /include/linux/pid.h | |
| parent | 19272b37aa4f83ca52bdf9c16d5d81bdd1354494 (diff) | |
pidfs: raise SB_I_NODEV and SB_I_NOEXEC
Similar to commit 1ed95281c0c7 ("anon_inode: raise SB_I_NODEV and SB_I_NOEXEC"):
it shouldn't be possible to execute pidfds via
execveat(fd_anon_inode, "", NULL, NULL, AT_EMPTY_PATH)
so raise SB_I_NOEXEC so that no one gets any creative ideas.
Also raise SB_I_NODEV as we don't expect or support any devices on pidfs.
Link: https://lore.kernel.org/20250618-work-pidfs-persistent-v2-1-98f3456fd552@kernel.org
Reviewed-by: Alexander Mikhalitsyn <aleksandr.mikhalitsyn@canonical.com>
Signed-off-by: Christian Brauner <brauner@kernel.org>
Diffstat (limited to 'include/linux/pid.h')
0 files changed, 0 insertions, 0 deletions