Ophestra ac34635890

container: set FD_CLOEXEC on all open files ...

While fd created from this side always has the FD_CLOEXEC flag, the same is not true for files left open by the parent. This change prevents those files from leaking into the container.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2025-11-12 00:18:29 +09:00

..

check

container/init: close initial process files on termination

2025-11-10 20:35:59 +09:00

fhs

container/init: close initial process files on termination

2025-11-10 20:35:59 +09:00

seccomp

container/seccomp/presets: add fields to literals

2025-11-07 05:11:57 +09:00

std

container/std/seccomp: remove ineffectual typecast

2025-11-07 05:45:51 +09:00

stub

container/init: close initial process files on termination

2025-11-10 20:35:59 +09:00

vfs

treewide: fit test untyped int literals in 32-bit

2025-11-05 20:13:19 +09:00

autoetc_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

autoetc.go

container/fhs: move pathname constants

2025-10-07 21:29:16 +09:00

autoroot_test.go

std: rename from comp

2025-11-05 02:47:43 +09:00

autoroot.go

message: relocate from container

2025-10-09 05:18:19 +09:00

capability_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

capability.go

container/syscall: export prctl wrapper

2025-10-22 05:26:54 +09:00

container_test.go

container: set FD_CLOEXEC on all open files

2025-11-12 00:18:29 +09:00

container.go

container: set FD_CLOEXEC on all open files

2025-11-12 00:18:29 +09:00

dispatcher_test.go

container/std: relocate rule types

2025-11-05 06:00:39 +09:00

dispatcher.go

container/std: relocate rule types

2025-11-05 06:00:39 +09:00

errors_test.go

treewide: fit test untyped int literals in 32-bit

2025-11-05 20:13:19 +09:00

errors.go

container/init: unwrap descriptive fatal error

2025-10-09 22:04:35 +09:00

executable_test.go

message: rename NewMsg to New

2025-11-03 01:49:27 +09:00

executable.go

container/executable: handle nil msg

2025-10-25 21:08:54 +09:00

init_test.go

container/init: close setup pipe early

2025-11-11 07:31:58 +09:00

init.go

container/init: close setup pipe early

2025-11-11 07:31:58 +09:00

initbind_test.go

std: rename from comp

2025-11-05 02:47:43 +09:00

initbind.go

std: rename from comp

2025-11-05 02:47:43 +09:00

initdev_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

initdev.go

container/fhs: move pathname constants

2025-10-07 21:29:16 +09:00

initmkdir_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

initmkdir.go

container/check: move absolute pathname

2025-10-07 20:57:58 +09:00

initoverlay_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

initoverlay.go

container/check: relocate overlay escape

2025-10-07 23:56:19 +09:00

initplace_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

initplace.go

container/initplace: remove indirect method

2025-10-13 01:06:45 +09:00

initproc_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

initproc.go

container/check: move absolute pathname

2025-10-07 20:57:58 +09:00

initremount_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

initremount.go

container/check: move absolute pathname

2025-10-07 20:57:58 +09:00

initsymlink_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

initsymlink.go

container/check: move absolute pathname

2025-10-07 20:57:58 +09:00

inittmpfs_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

inittmpfs.go

container/check: move absolute pathname

2025-10-07 20:57:58 +09:00

landlock_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

landlock.go

treewide: fit test untyped int literals in 32-bit

2025-11-05 20:13:19 +09:00

mount_test.go

treewide: fit test untyped int literals in 32-bit

2025-11-05 20:13:19 +09:00

mount.go

message: relocate from container

2025-10-09 05:18:19 +09:00

params_test.go

treewide: fit test untyped int literals in 32-bit

2025-11-05 20:13:19 +09:00

params.go

container/params: expose pipe

2025-10-31 22:39:02 +09:00

path_test.go

treewide: fit test untyped int literals in 32-bit

2025-11-05 20:13:19 +09:00

path.go

container/fhs: move pathname constants

2025-10-07 21:29:16 +09:00

syscall_386.go

container: add 386 constants

2025-11-05 20:21:14 +09:00

syscall_amd64.go

container: move syscall constants

2025-07-07 13:23:01 +09:00

syscall.go

container/syscall: export prctl wrapper

2025-10-22 05:26:54 +09:00

sysctl.go

message: relocate from container

2025-10-09 05:18:19 +09:00