Hacker News new | ask | show | jobs
by Hixon10 486 days ago
> Why would it use `chroot`?

I am not sure, is this custom Os.Root implementation good enough to relay on it? I see that it is based on openat, and validation of paths/symlinks. But should we expect CVEs, which will break this protection layer?

1 comments

Let me get my crystal ball.