Messages in this thread | | | From | Andi Kleen <> | Subject | Re: [RFC] fs, proc: Introduce the /proc/<pid>/map_files/ directory v2 | Date | Wed, 24 Aug 2011 10:36:58 -0700 |
| |
Pavel Emelyanov <xemul@parallels.com> writes: > > No and this is the trick - when you readlink it - it give you trash, but > when you open one - you get exactly the same file as the map points to.
Isn't that a minor security hole?
For example if I pass a file descriptor into a chroot process for reading, and with this interface you can open it for writing too. I could see this causing problems.
-Andi
-- ak@linux.intel.com -- Speaking for myself only
| |