Evidence · DiggingBeagle record
Kata Containers PR 13587: working directory validation after procfs root transitions
Kata Containers PR 13587: working directory validation after procfs root transitions
- Source role
- primary disclosure
Evidence record
Kata Containers PR 13587: working directory validation after procfs root transitions
Claim-level citations (2)
- supportsKata Containers process could retain a working directory outside its expected root: The Kata Containers patch rejects a process with an inaccessible or escaped current working directory by checking the getcwd outcome after the root transition, rather than assuming changing the root also changes the current directory.
Kata Containers pull request 13587, agent: reject cwd outside the container root
- supportsKata Containers process could retain a working directory outside its expected root: The Kata Containers patch describes a process retaining a working directory outside the expected container root after a /proc/<pid>/root transition and adds a getcwd failure check to reject the state.
PR 13587 description: procfs magic links, getcwd ENOENT and guard