Skip to content

Commit

Permalink
fix: doc
Browse files Browse the repository at this point in the history
  • Loading branch information
gotlougit committed Sep 28, 2023
1 parent eb90d2a commit 0077ad1
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions src/builtins/danger_zone.rs
Original file line number Diff line number Diff line change
Expand Up @@ -129,8 +129,10 @@ impl RuleSet for ForkAndExec {
/// [`Pipes`] is in the danger zone because it can be used create a pipe for IPC.
///
/// # Security Considerations
/// The piped process will still be under seccomp's restrictions (see
/// `tests/inherit_filters.rs`) but depending on your filter it could still do bad things.
/// You can, for example, create the pipe, fork the process, and then the parent
/// and the child both have the pipe but even if you apply seccomp to the parent,
/// it doesn't apply to the already-forked child
/// (unless you use [`apply_to_all_threads`] of course)
pub struct Pipes;
impl RuleSet for Pipes {
fn simple_rules(&self) -> Vec<Sysno> {
Expand Down

0 comments on commit 0077ad1

Please sign in to comment.