• [gentoo-dev] sandbox and /proc//clear_refs [was: problems with med

    From Andrey Grozin@21:1/5 to All on Wed Feb 19 05:50:01 2025
    Some additional information:

    # strace -e trace=file ./cordtest
    ...
    openat(AT_FDCWD, "/proc/3702/clear_refs", O_WRONLY) = 3
    ...
    SUCCEEDED
    +++ exited with 0 +++

    It is absolutely legal for the owner of a process to write to /proc/<pid>/clear_refs
    I think it is a bug in Gentoo sandbox that this is not allowed.

    Andrey

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Mike Gilbert@21:1/5 to grozin@gentoo.org on Wed Feb 19 06:10:01 2025
    On Tue, Feb 18, 2025 at 11:40 PM Andrey Grozin <grozin@gentoo.org> wrote:

    Some additional information:

    # strace -e trace=file ./cordtest
    ...
    openat(AT_FDCWD, "/proc/3702/clear_refs", O_WRONLY) = 3
    ...
    SUCCEEDED
    +++ exited with 0 +++

    It is absolutely legal for the owner of a process to write to /proc/<pid>/clear_refs
    I think it is a bug in Gentoo sandbox that this is not allowed.

    Please use Bugzilla.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)