On 29/01/2020 00:25, Christian Brauner wrote: > I've been reading along quietly. In addition to what Jens said, to ease > everyone's mind: pidfd_getfd() doesn't allow to unconditionally grab > file descriptors for any task. That would be crazy. The calling task > needs ptrace_may_access() permissions on the target task, i.e. the task > from which you want to grab the io_uring file descriptor. And any > calling task that has ptrace_may_access() permissions on the target can > do much worse than just grabbing an fd. Good to know, thanks! -- Pavel Begunkov
Attachment:
signature.asc
Description: OpenPGP digital signature
