|
|
|
|
|
by Hixon10
486 days ago
|
|
> Why would it use `chroot`? I am not sure, is this custom Os.Root implementation good enough to relay on it? I see that it is based on openat, and validation of paths/symlinks. But should we expect CVEs, which will break this protection layer? |
|