Guarantee that `getParentFD()` doesn't follow symlinks
When opening the parent FD, ensures that none of the paths are symlinks. This is done to prevent possile attacks that changes a path to a symlink and makes the name resolution redirect to a different path. This is a defense in depth measure. PiperOrigin-RevId: 966826882
F
Fabricio Voznika committed
a7402ea5de253311ea085d054fc8540eb26af4be
Parent: d3c4075
Committed by gVisor bot <gvisor-bot@google.com>
on 8/18/2026, 10:07:25 PM