unix: Preserve FD_RESOLVE_BENEATH when passing an fd
Needs ReviewPublic
Actions

Authored by markj on Fri, May 22, 10:12 PM.

Tags

None

Referenced Files

	Unknown Object (File)
	Thu, Jun 4, 9:05 AM

	Unknown Object (File)
	Mon, Jun 1, 12:54 PM

	Unknown Object (File)
	Sat, May 30, 9:40 PM

	Unknown Object (File)
	Sat, May 30, 7:38 PM

	Unknown Object (File)
	Fri, May 29, 8:28 PM

	Unknown Object (File)
	Fri, May 29, 3:06 PM

	Unknown Object (File)
	Fri, May 29, 1:39 PM

	Unknown Object (File)
	Thu, May 28, 10:45 PM

Subscribers

This revision needs review, but there are no reviewers specified.

Details

Reviewers: None

Summary

The FD_RESOLVE_BENEATH flag is supposed to be sticky. It's set when you
receive an fd from a different jail and preserved by openat(<dfd>) etc..
However, if you send the fd to yourself, the flag is stripped since
SCM_RIGHTS message don't preserve file descriptor flags.

Fix this by preserving those flags and checking for UF_RESOLVE_BENEATH
in restrict_rights().