[pve-devel] [PATCH common 0/2] two more syscalls: opeant() and mkdirat()

[Wolfgang Bumiller]

These will be used by pve-container for some hardening.
They'll be used to combine the check_mount_path() and make_tree() code
to allow creating paths without symlinks directly, as well as performing
a stronger check on the mountpoints after bind-mounting in order to
fix a possible race condition with recursive writable bind mounted file
system hierarchies.

openat() would have been useful on various occasions already...

Wolfgang Bumiller (2):
  added: openat, mkdirat
  Allow O_PATH and O_TMPFILE to be exported

 src/PVE/Tools.pm | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

-- 
2.1.4