Re: [GIT PULL] execve updates for v6.13-rc1

[Kees Cook]

On November 20, 2024 6:23:55 PM PST, Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> wrote:
>But we're *not* adding a new complete garbage "copy random stuff badly
>from user space" thing.

I'll drop this and resend the PR.

I think using the dentry should work, as you say. Though with a more paranoid hat on, I wonder if it could be an info leak if the original filename isn't "visible" in the context it's running in; containers do weird stuff. (But I'm hard-pressed to imagine how the filename would actually be a useful "secret".)

-Kees

-- 
Kees Cook