diff options
| author | Alexander Potapenko <glider@google.com> | 2024-07-01 08:45:51 +0200 |
|---|---|---|
| committer | Dmitry Vyukov <dvyukov@google.com> | 2024-07-02 08:52:31 +0000 |
| commit | 3160a12dd1047174becc935fbaae965b3d00ea59 (patch) | |
| tree | 0080cffe61f3e0326c5d12367b3d59f735760493 /sys/linux/init.go | |
| parent | dc6047a330327f6253591d8d98301e6f5949cf9c (diff) | |
executor: linux: chroot into tmpfs with sandbox=none
To prevent the executor from accidentally making the whole root file system
immutable (which breaks fuzzing), modify sandbox=none to create a tmpfs mount
and chroot into it before executing programs in a process.
According to `syz-manager -mode=smoke-test`, the number of enabled syscalls on
x86 doesn't change with this patch.
Fixes #4939, #2933, #971.
Diffstat (limited to 'sys/linux/init.go')
0 files changed, 0 insertions, 0 deletions