Kir Kolyshkin 9258eac072 libct/start: use execabs for newuidmap lookup ...

Since we are looking up the path to newuidmap/newgidmap in one context,
and executing those in another (libct/nsenter), it might make sense to
use a stricter rules for looking up path to those binaries.

Practically it means that if someone wants to use custom newuidmap and
newgidmap binaries from $PATH, it would be impossible to use these from
the current directory by means of PATH=.:$PATH; instead one would have
to do something like PATH=$(pwd):$PATH.

See https://go.dev/blog/path-security for background.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>

2022-02-03 17:33:00 -08:00

..

net

seccomp: prepend -ENOSYS stub to all filters

2021-01-28 23:11:22 +11:00

sys

libct/start: use execabs for newuidmap lookup

2022-02-03 17:33:00 -08:00