Ophestra ac34635890 container: set FD_CLOEXEC on all open files ...

While fd created from this side always has the FD_CLOEXEC flag, the same is not true for files left open by the parent. This change prevents those files from leaking into the container.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2025-11-12 00:18:29 +09:00

..

case

hst/grp_pwd: specify new uid format

2025-11-04 08:24:41 +09:00

tool

container/init: close setup pipe early

2025-11-11 07:31:58 +09:00

assert_test.go

test/sandbox: guard on testtool tag

2025-07-07 20:11:29 +09:00

assert.go

test/sandbox: check extra writable paths

2025-09-14 15:12:51 +09:00

configuration.nix

test/sandbox: create marker in /var/tmp

2025-09-14 16:45:17 +09:00

default.nix

treewide: rename to hakurei

2025-06-25 04:57:41 +09:00

fs_test.go

test/sandbox: guard on testtool tag

2025-07-07 20:11:29 +09:00

fs.go

test/sandbox: guard on testtool tag

2025-07-07 20:11:29 +09:00

mount_test.go

test/sandbox: guard on testtool tag

2025-07-07 20:11:29 +09:00

mount.go

test/sandbox: guard on testtool tag

2025-07-07 20:11:29 +09:00

ptrace.go

test/sandbox: verify seccomp on all test cases

2025-07-09 04:21:35 +09:00

seccomp.go

test/sandbox: guard on testtool tag

2025-07-07 20:11:29 +09:00

test.py

container: set FD_CLOEXEC on all open files

2025-11-12 00:18:29 +09:00