You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, we pass attach_target as string and will open the the file in the implementation. This may lead to arbitary access of files and violate the safety of the Wasm sandbox. We should pass file descriptor, which was controlled by the Wasm sandbox, to enhance the safety of the execution.
The text was updated successfully, but these errors were encountered:
yunwei37
changed the title
[FEATURE] Pass file descriptor instead of file path at wasm_attach_bpf_program
[BUG] Pass file descriptor instead of file path at wasm_attach_bpf_programMar 2, 2023
Currently, we pass
attach_target
as string and will open the the file in the implementation. This may lead to arbitary access of files and violate the safety of the Wasm sandbox. We should pass file descriptor, which was controlled by the Wasm sandbox, to enhance the safety of the execution.The text was updated successfully, but these errors were encountered: