зеркало из https://github.com/mozilla/gecko-dev.git
08546b4b69
As of kernel 5.8 (commit [e9c15badb][]), Linux will set the internal `FMODE_NONOTIFY` flag on files that don't exist in the filesystem, including (unnamed) pipes and sockets. Although this flag isn't properly part of the userspace API, it will be returned by F_GETFL, so userspace code that tries to change file flags will pass it to F_SETFL. The implementation of `F_SETFL` has an allow list of flags userspace can change (`SETFL_MASK`) and ignores all others, but our sandbox has a list of flags *known* to be ignored, because currently unknown flags could potentially be accepted by the kernel in the future. This patch adds `FMODE_NONOTIFY` as an ignored flag. [e9c15badb]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e9c15badbb7b20ccdbadf5da14e0a68fbad51015 Differential Revision: https://phabricator.services.mozilla.com/D83205 |
||
---|---|---|
.. | ||
broker | ||
glue | ||
gtest | ||
interfaces | ||
launch | ||
reporter | ||
LinuxSched.h | ||
Sandbox.cpp | ||
Sandbox.h | ||
SandboxBrokerClient.cpp | ||
SandboxBrokerClient.h | ||
SandboxChrootProto.h | ||
SandboxFilter.cpp | ||
SandboxFilter.h | ||
SandboxFilterUtil.cpp | ||
SandboxFilterUtil.h | ||
SandboxHooks.cpp | ||
SandboxInfo.cpp | ||
SandboxInfo.h | ||
SandboxInternal.h | ||
SandboxLogging.cpp | ||
SandboxLogging.h | ||
SandboxOpenedFiles.cpp | ||
SandboxOpenedFiles.h | ||
SandboxReporterClient.cpp | ||
SandboxReporterClient.h | ||
moz.build |