| commit | 1c40096ed7d3f59dc9e80a7a99c4a93beec1ba63 | [log] [tgz] |
|---|---|---|
| author | Christian Brauner <brauner@kernel.org> | Tue Aug 06 14:13:25 2024 +0200 |
| committer | Christian Brauner <brauner@kernel.org> | Tue Aug 06 17:28:41 2024 +0200 |
| tree | 71b9884f13b368b22bb4f1fec21e3ea35d970ece | |
| parent | 98b39ee7342ffc11f378d1835e3a47bd96369705 [diff] |
proc: block mounting on top of /proc/<pid>/fdinfo/* Entries under /proc/<pid>/fdinfo/* are ephemeral and may go away before the process dies. As such allowing them to be used as mount points creates the ability to leak mounts that linger until the process dies with no ability to unmount them until then. Don't allow using them as mountpoints. Signed-off-by: Christian Brauner <brauner@kernel.org>