Karolin Varner 6d47169a5c feat: Set CLOEXEC flag on claimed fds and mask them ...

Masking the file descriptors (by replaying them with a file descriptor pointing towards /dev/null)
mitigates use after free (on file descriptor) attacks. In case some
piece of code still holds a reference to the file descriptor, that
file descriptor now merely holds a reference to /dev/null.

Otherwise, the file descriptor might be reused and the reference
could now mistakenly point to all sorts of – potentially more harmful – files, such as memfd_secret
file descriptors, storing our secret keys.

2024-08-05 16:16:09 +02:00

..

src

feat: Set CLOEXEC flag on claimed fds and mask them

2024-08-05 16:16:09 +02:00

Cargo.toml

feat: A variety of utilities in preparation for implementing the API

2024-08-03 16:50:21 +02:00