Comment 14 for bug 1639345

Revision history for this message
Christian Brauner (cbrauner) wrote : Re: [Bug 1639345] Re: lxc-attach to malicious container allows access to host

The problem is that we don't know the PID of the attached process
beforehand, so we need to keep an fd for a clean /proc open and then
do open(/proc/self/attrc/current) and so on.