[RFC] fs, proc: Introduce the /proc/<pid>/map_files/ directory v2

Andi Kleen andi at firstfloor.org
Wed Aug 24 10:36:58 PDT 2011

Pavel Emelyanov <xemul at parallels.com> writes:
> No and this is the trick - when you readlink it - it give you trash, but
> when you open one - you get exactly the same file as the map points to.

Isn't that a minor security hole?

For example if I pass a file descriptor into a chroot process for
reading, and with this interface you can open it for writing too.
I could see this causing problems.


ak at linux.intel.com -- Speaking for myself only

More information about the Containers mailing list