2 Commits

Author	SHA1	Message	Date
Kir Kolyshkin	c84a878cac	internal/sys: simplify WriteSysctls ... Apparently Write (and WriteString) must return an error (apparently io.ErrShortWrite) on short writes (see [1], [2]), so no explicit check for a short write is needed. While at it, use (*os.File).WriteString directly rather than io.WriteString. [1]: https://pkg.go.dev/os#File.Write [2]: https://pkg.go.dev/io#Writer Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>	2026-01-07 13:27:44 -08:00
Aleksa Sarai	77d217c7c3	init: write sysctls using safe procfs API ... sysctls could in principle also be used as a write gadget for arbitrary procfs files. As this requires getting a non-subset=pid /proc handle we amortise this by only allocating a single procfs handle for all sysctl writes. Fixes: GHSA-cgrx-mc8f-2prm CVE-2025-52881 Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>	2025-11-01 21:24:05 +11:00