SIGN IN SIGN UP

Guarantee that `getParentFD()` doesn't follow symlinks

When opening the parent FD, ensures that none of the paths are symlinks.
This is done to prevent possile attacks that changes a path to a symlink
and makes the name resolution redirect to a different path.

This is a defense in depth measure.

PiperOrigin-RevId: 966826882
F
Fabricio Voznika committed
a7402ea5de253311ea085d054fc8540eb26af4be
Parent: d3c4075
Committed by gVisor bot <gvisor-bot@google.com> on 8/18/2026, 10:07:25 PM