i/Aether
1
0
Fork 0
mirror of https://github.com/fawney19/Aether.git synced 2026-09-08 20:20:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(runtime): tolerate Linux socket device identity

Browse Source
This commit is contained in:
elky
2026-09-05 02:43:42 +08:00
parent b37b252b14
commit f5e1420ee6
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/aether-gateway/src/execution_runtime/server.rs
+8 -2
View File
@@ -578,8 +578,14 @@ fn harden_execution_runtime_socket(
|| metadata.uid() != effective_uid
|| metadata.nlink() != 1
|| metadata.mode() & 0o777 != 0o600
|| (cfg!(target_os = "linux")
&& (metadata.dev() != stat.st_dev as u64 || metadata.ino() != stat.st_ino as u64))
// On Linux a pathname socket is represented by the filesystem's
// dentry while `fstat` reports the corresponding sockfs inode. The
// inode number is shared, but the device id is intentionally not;
// comparing `st_dev` would reject every valid socket on overlay/tmpfs
// runners. The validated canonical parent and inode identity still
// close the replacement window without relying on that differing
// device number.
|| (cfg!(target_os = "linux") && metadata.ino() != stat.st_ino as u64)
{
return Err(io::Error::new(
io::ErrorKind::PermissionDenied,