From nobody Fri Jun 19 09:07:17 2026 Received: from ewsoutbound.kpnmail.nl (ewsoutbound.kpnmail.nl [195.121.94.185]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id BE0612DCF45 for ; Fri, 24 Apr 2026 11:48:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=195.121.94.185 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777031285; cv=none; b=JkOFHxMe6VHLth5lsFX3N+G/jqj0AWa4ucjNuIyquZxxSEVgEzrEY0DszFXmLIwviptxFS06Cal54rmKJT7e2eacJ84EjI6Ag3MFg3kU9DexSKXent5DBffRbeTnGwo4Eg2pwqL7713S9TiDs+z8EG0QsYqakAVqt9Dv8Bya3Xo= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777031285; c=relaxed/simple; bh=4r5RvhbLKnR/CgAsUMSEjQzzprHmmek/AmO6M+zAB60=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=dBb0ke4JY37Efpvs2unSYX36BYsEajakD6MHyKUcLZpl8e97j1/B6x0UUdrGHIYtTinZ7mawnIi1Yu7cSGXcDQ1WFPyBnl56u6C9AUKreWCaLrLt9CyBxBrWhp5uXLAYCxjK6gq5+iy6KMBG3R4TUVBmUsQ9Fh3fkmRidPThUQw= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=xs4all.nl; spf=pass smtp.mailfrom=xs4all.nl; dkim=pass (2048-bit key) header.d=xs4all.nl header.i=@xs4all.nl header.b=stjuhjTC; arc=none smtp.client-ip=195.121.94.185 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=xs4all.nl Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=xs4all.nl Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=xs4all.nl header.i=@xs4all.nl header.b="stjuhjTC" X-KPN-MessageId: 4aa257ec-3fd3-11f1-8ff3-005056999439 Received: from smtp.kpnmail.nl (unknown [10.31.155.8]) by ewsoutbound.so.kpn.org (Halon) with ESMTPS id 4aa257ec-3fd3-11f1-8ff3-005056999439; Fri, 24 Apr 2026 13:46:54 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=xs4all.nl; s=xs4all01; h=mime-version:message-id:date:subject:to:from; bh=ZrhMYcreG9Hj+7wH35gfOV2SV98uZrceH6hCeQICsGg=; b=stjuhjTC1LvnAatFjI6P5/spawHckQyezjdZbo5tq3o4VPAhUgGmmgX6hVIy1ImeLnVdGgBOmQP2K Og4JWiOq8ovY6xCKUGGmtj1VL/rFAFiYGJGRctZCdz8sRH/iCB8sTlsDGEnyA81FY+/kSmPj9Hvr6n vBCou8fdy4aOPJcvcsmcRxDQACZXDGiVTuJpLh/5YAK1Z463siHKfHo2Wd+lvnlvTk+qlwtoi7ofHY vSVPfe4O08nsuEAxcUycpNb/Am7eQ9PKRJn+WSsclHBNs1PCFpdRFGllfTnawFFEm43gi2PjHDjItC TBZ4F0selLyuxoHUVE7pWAl27sxxeKg== X-KPN-MID: 33|FUnsPlT93BNBRRPIGjQuHsTveNGhZKo7Fw1aQ0rXGKxm9L+62p1aCM/VvQiDFCg 9nxwyXHXVWIH6GuP4d/iorEXLeIwxU0iC+TxggF4CJLk= X-KPN-VerifiedSender: Yes X-CMASSUN: 33|FpymY/PkmFhHzrLRaMdxRmirFll8b5SmaGQ+Z9Eomz5JSL4V3AgigkWq2uktUeK nJgcvjEyTD7qTwe4aLURuLQ== Received: from daedalus.home (unknown [178.227.109.146]) by smtp.xs4all.nl (Halon) with ESMTPSA id 4a5d8641-3fd3-11f1-9c0b-00505699d6e5; Fri, 24 Apr 2026 13:46:54 +0200 (CEST) From: Jori Koolstra To: Christian Brauner , Aleksa Sarai , Jeff Layton , Chuck Lever , Alexander Aring , Alexander Viro , Jan Kara , Arnd Bergmann Cc: linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, Jori Koolstra , linux-arch@vger.kernel.org (open list:GENERIC INCLUDE/ASM HEADER FILES) Subject: [PATCH v5 1/2] vfs: add O_EMPTYPATH to openat(2)/openat2(2) Date: Fri, 24 Apr 2026 13:46:02 +0200 Message-ID: <20260424114611.1678641-2-jkoolstra@xs4all.nl> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260424114611.1678641-1-jkoolstra@xs4all.nl> References: <20260424114611.1678641-1-jkoolstra@xs4all.nl> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" To get an operable version of an O_PATH file descriptor, it is possible to use openat(fd, ".", O_DIRECTORY) for directories, but other files currently require going through open("/proc//fd/"), which depends on a functioning procfs. This patch adds the O_EMPTYPATH flag to openat(2)/openat2(2). If passed, LOOKUP_EMPTY is set at path resolution time. Note: This implies that you cannot rely anymore on disabling procfs from being mounted (e.g. inside a container without procfs mounted and with CAP_SYS_ADMIN dropped) to prevent O_PATH fds from being re-opened read-write. Signed-off-by: Jori Koolstra Reviewed-by: Aleksa Sarai Reviewed-by: Christian Brauner --- fs/fcntl.c | 2 +- fs/open.c | 6 ++++-- include/linux/fcntl.h | 2 +- include/uapi/asm-generic/fcntl.h | 4 ++++ 4 files changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/fcntl.c b/fs/fcntl.c index beab8080badf..7d2165855a9c 100644 --- a/fs/fcntl.c +++ b/fs/fcntl.c @@ -1169,7 +1169,7 @@ static int __init fcntl_init(void) * Exceptions: O_NONBLOCK is a two bit define on parisc; O_NDELAY * is defined as O_NONBLOCK on some platforms and not on others. */ - BUILD_BUG_ON(20 - 1 /* for O_RDONLY being 0 */ !=3D + BUILD_BUG_ON(21 - 1 /* for O_RDONLY being 0 */ !=3D HWEIGHT32( (VALID_OPEN_FLAGS & ~(O_NONBLOCK | O_NDELAY)) | __FMODE_EXEC)); diff --git a/fs/open.c b/fs/open.c index 681d405bc61e..9e0164a8c1fb 100644 --- a/fs/open.c +++ b/fs/open.c @@ -1158,7 +1158,7 @@ struct file *kernel_file_open(const struct path *path= , int flags, EXPORT_SYMBOL_GPL(kernel_file_open); =20 #define WILL_CREATE(flags) (flags & (O_CREAT | __O_TMPFILE)) -#define O_PATH_FLAGS (O_DIRECTORY | O_NOFOLLOW | O_PATH | O_CLOEXEC) +#define O_PATH_FLAGS (O_DIRECTORY | O_NOFOLLOW | O_PATH | O_CLOEXEC | O_E= MPTYPATH) =20 inline struct open_how build_open_how(int flags, umode_t mode) { @@ -1279,6 +1279,8 @@ inline int build_open_flags(const struct open_how *ho= w, struct open_flags *op) lookup_flags |=3D LOOKUP_DIRECTORY; if (!(flags & O_NOFOLLOW)) lookup_flags |=3D LOOKUP_FOLLOW; + if (flags & O_EMPTYPATH) + lookup_flags |=3D LOOKUP_EMPTY; =20 if (how->resolve & RESOLVE_NO_XDEV) lookup_flags |=3D LOOKUP_NO_XDEV; @@ -1360,7 +1362,7 @@ static int do_sys_openat2(int dfd, const char __user = *filename, if (unlikely(err)) return err; =20 - CLASS(filename, name)(filename); + CLASS(filename_flags, name)(filename, op.lookup_flags); return FD_ADD(how->flags, do_file_open(dfd, name, &op)); } =20 diff --git a/include/linux/fcntl.h b/include/linux/fcntl.h index a332e79b3207..c65c5c73d362 100644 --- a/include/linux/fcntl.h +++ b/include/linux/fcntl.h @@ -10,7 +10,7 @@ (O_RDONLY | O_WRONLY | O_RDWR | O_CREAT | O_EXCL | O_NOCTTY | O_TRUNC | \ O_APPEND | O_NDELAY | O_NONBLOCK | __O_SYNC | O_DSYNC | \ FASYNC | O_DIRECT | O_LARGEFILE | O_DIRECTORY | O_NOFOLLOW | \ - O_NOATIME | O_CLOEXEC | O_PATH | __O_TMPFILE) + O_NOATIME | O_CLOEXEC | O_PATH | __O_TMPFILE | O_EMPTYPATH) =20 /* List of all valid flags for the how->resolve argument: */ #define VALID_RESOLVE_FLAGS \ diff --git a/include/uapi/asm-generic/fcntl.h b/include/uapi/asm-generic/fc= ntl.h index 613475285643..bfc68156b45a 100644 --- a/include/uapi/asm-generic/fcntl.h +++ b/include/uapi/asm-generic/fcntl.h @@ -88,6 +88,10 @@ #define __O_TMPFILE 020000000 #endif =20 +#ifndef O_EMPTYPATH +#define O_EMPTYPATH (1 << 26) /* allow empty path */ +#endif + /* a horrid kludge trying to make sure that this will fail on old kernels = */ #define O_TMPFILE (__O_TMPFILE | O_DIRECTORY) =20 --=20 2.54.0 From nobody Fri Jun 19 09:07:17 2026 Received: from ewsoutbound.kpnmail.nl (ewsoutbound.kpnmail.nl [195.121.94.184]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 05BC93A1689 for ; Fri, 24 Apr 2026 11:47:12 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=195.121.94.184 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777031234; cv=none; b=ZvHE41H2zhdptvRtB2ipSueGO5ryQ/DrzEwqP6mxrdD/Vi/hv9jRVbOrWloHf6Z/ozQs3EramwXkqdvli08S+rYy/j5aaisxs1cueGaVP66qs8CAVJ+B9mDVCutLg8uJESfvH2ny8c8acm4OBmYtNUVripOzw0/ZtH4x4lzeIvw= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777031234; c=relaxed/simple; bh=of1ei5AinEByyr4vGyS0hUQUKcBsyxYr4kztX2Wu5nQ=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=ktTwm60vHZJ0SWmxR7OmnCVibUcsKd8jaI2CL0hKxNziBa2FE0cnti8k6iefogXTWvJPbX2qerF0mmudRYSYQkpk78LSIu0Rpn/DvkEfw49JtPUm2wHdqbEuBhiclScByxucHHsNdZ1zLekhSlH3nrozQ7O4YBipf3XLxBsxZOw= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=xs4all.nl; spf=pass smtp.mailfrom=xs4all.nl; dkim=pass (2048-bit key) header.d=xs4all.nl header.i=@xs4all.nl header.b=mvUvuVki; arc=none smtp.client-ip=195.121.94.184 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=xs4all.nl Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=xs4all.nl Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=xs4all.nl header.i=@xs4all.nl header.b="mvUvuVki" X-KPN-MessageId: 54abf63c-3fd3-11f1-afde-005056994fde Received: from smtp.kpnmail.nl (unknown [10.31.155.8]) by ewsoutbound.so.kpn.org (Halon) with ESMTPS id 54abf63c-3fd3-11f1-afde-005056994fde; Fri, 24 Apr 2026 13:47:11 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=xs4all.nl; s=xs4all01; h=mime-version:message-id:date:subject:to:from; bh=Av2yy3jIxSiJO0Vtl0sA4w+c3DISiaPS7dntvIImIwY=; b=mvUvuVki0+rXg6xcFpIkvAemxC+0xVYh+dYKHy90/U4UUJuRipNZ0lt7NSqu/rkQGMsRNhM4OdbLS Ap9GLh42ASFozeYEJphN5LyPfOEGaUjdx6AjcaUXFMulL3F0OFjHivy5QNKzZEie118zoKLgu85v0T khAMIqu4AeVfNLsm8vNI9VtGTNuR35ZL0gZvFgmP9CTeuAJL/G5PkUK6Zync/k+SBF3gyb/6/r9/HB +1yQ6rS2BPBVC4TQjmRvs2QOl5wR9TCb2f6e1OBjG4FfP5zAZCAF3cvdH5TdfSRPtZK36sX3ZwZG5y kVLOSNuC17Zy4dn78rCsvwMXLydPRSw== X-KPN-MID: 33|5uwLU1Is6HTPtbpq3n25D56o9w8X0YgCIT0NJmC/9ZmiQVUyp4131q1gzAbj128 UIYIT76OLY7qaNpTy5xbshEGwMHRGxRUBF2qCSxHfNrM= X-KPN-VerifiedSender: Yes X-CMASSUN: 33|a3eU5w9N8DVzzvyrum0x87E72wtwZRYGlBXjXaD3z8StejtSSuk7WbI/XgsB6Ca zLboZcPlSRvrQ18VwI7/RvA== Received: from daedalus.home (unknown [178.227.109.146]) by smtp.xs4all.nl (Halon) with ESMTPSA id 5465d358-3fd3-11f1-9c0b-00505699d6e5; Fri, 24 Apr 2026 13:47:11 +0200 (CEST) From: Jori Koolstra To: Christian Brauner , Aleksa Sarai , Shuah Khan Cc: Jan Kara , linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, Jori Koolstra , Aleksa Sarai , Wei Yang , Bala-Vignesh-Reddy , Andrew Morton , linux-kselftest@vger.kernel.org (open list:KERNEL SELFTEST FRAMEWORK) Subject: [PATCH v5 2/2] selftest: add tests for O_EMPTYPATH Date: Fri, 24 Apr 2026 13:46:03 +0200 Message-ID: <20260424114611.1678641-3-jkoolstra@xs4all.nl> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260424114611.1678641-1-jkoolstra@xs4all.nl> References: <20260424114611.1678641-1-jkoolstra@xs4all.nl> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Add tests for the new O_EMPTYPATH flag of openat(2)/openat2(2). Also, the current openat2 tests include a helper header file that defines the necessary structs and constants to use openat2(2), such as struct open_how. This may result in conflicting definitions when the system header openat2.h is present as well. So add openat2.h generated by 'make headers' to the uapi header files in ./tools/include and remove the helper file definitions of the current openat2 selftests. Signed-off-by: Jori Koolstra --- tools/include/uapi/linux/openat2.h | 43 +++++++++++++++ .../selftests/filesystems/openat2/Makefile | 4 +- .../filesystems/openat2/emptypath_test.c | 55 +++++++++++++++++++ .../selftests/filesystems/openat2/helpers.h | 35 +----------- 4 files changed, 101 insertions(+), 36 deletions(-) create mode 100644 tools/include/uapi/linux/openat2.h create mode 100644 tools/testing/selftests/filesystems/openat2/emptypath_t= est.c diff --git a/tools/include/uapi/linux/openat2.h b/tools/include/uapi/linux/= openat2.h new file mode 100644 index 000000000000..4759c471676c --- /dev/null +++ b/tools/include/uapi/linux/openat2.h @@ -0,0 +1,43 @@ +/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */ +#ifndef _LINUX_OPENAT2_H +#define _LINUX_OPENAT2_H + +#include + +/* + * Arguments for how openat2(2) should open the target path. If only @flag= s and + * @mode are non-zero, then openat2(2) operates very similarly to openat(2= ). + * + * However, unlike openat(2), unknown or invalid bits in @flags result in + * -EINVAL rather than being silently ignored. @mode must be zero unless o= ne of + * {O_CREAT, O_TMPFILE} are set. + * + * @flags: O_* flags. + * @mode: O_CREAT/O_TMPFILE file mode. + * @resolve: RESOLVE_* flags. + */ +struct open_how { + __u64 flags; + __u64 mode; + __u64 resolve; +}; + +/* how->resolve flags for openat2(2). */ +#define RESOLVE_NO_XDEV 0x01 /* Block mount-point crossings + (includes bind-mounts). */ +#define RESOLVE_NO_MAGICLINKS 0x02 /* Block traversal through procfs-style + "magic-links". */ +#define RESOLVE_NO_SYMLINKS 0x04 /* Block traversal through all symlinks + (implies OEXT_NO_MAGICLINKS) */ +#define RESOLVE_BENEATH 0x08 /* Block "lexical" trickery like + "..", symlinks, and absolute + paths which escape the dirfd. */ +#define RESOLVE_IN_ROOT 0x10 /* Make all jumps to "/" and ".." + be scoped inside the dirfd + (similar to chroot(2)). */ +#define RESOLVE_CACHED 0x20 /* Only complete if resolution can be + completed through cached lookup. May + return -EAGAIN if that's not + possible. */ + +#endif /* _LINUX_OPENAT2_H */ diff --git a/tools/testing/selftests/filesystems/openat2/Makefile b/tools/t= esting/selftests/filesystems/openat2/Makefile index 7736e37b7986..d848aac96bde 100644 --- a/tools/testing/selftests/filesystems/openat2/Makefile +++ b/tools/testing/selftests/filesystems/openat2/Makefile @@ -1,8 +1,8 @@ # SPDX-License-Identifier: GPL-2.0-or-later =20 CFLAGS +=3D $(KHDR_INCLUDES) -CFLAGS +=3D -Wall -O2 -g -fsanitize=3Daddress -fsanitize=3Dundefined -TEST_GEN_PROGS :=3D openat2_test resolve_test rename_attack_test +CFLAGS +=3D -Wall -O2 -g -fsanitize=3Daddress -fsanitize=3Dundefined $(TOO= LS_INCLUDES) +TEST_GEN_PROGS :=3D openat2_test resolve_test rename_attack_test emptypath= _test =20 # gcc requires -static-libasan in order to ensure that Address Sanitizer's # library is the first one loaded. However, clang already statically links= the diff --git a/tools/testing/selftests/filesystems/openat2/emptypath_test.c b= /tools/testing/selftests/filesystems/openat2/emptypath_test.c new file mode 100644 index 000000000000..d75b5e998ff9 --- /dev/null +++ b/tools/testing/selftests/filesystems/openat2/emptypath_test.c @@ -0,0 +1,55 @@ +// SPDX-License-Identifier: GPL-2.0-or-later + +#define __SANE_USERSPACE_TYPES__ +#include +#include +#include + +#include "kselftest.h" + +#ifndef O_EMPTYPATH +#define O_EMPTYPATH (1 << 26) +#endif + +int main(void) +{ + int opath_fd, reopen_fd; + const char *path =3D "/tmp/emptypath_test"; + + ksft_print_header(); + ksft_set_plan(2); + + opath_fd =3D open(path, O_CREAT | O_WRONLY, S_IRWXU); + if (opath_fd < 0) + ksft_exit_fail_msg("create %s: %m\n", path); + close(opath_fd); + + opath_fd =3D open(path, O_PATH); + if (opath_fd < 0) + ksft_exit_fail_msg("open %s O_PATH: %m\n", path); + + reopen_fd =3D openat(opath_fd, "", O_RDONLY); + if (reopen_fd < 0 && errno =3D=3D ENOENT) + ksft_test_result_pass("empty path without O_EMPTYPATH returns ENOENT\n"); + else if (reopen_fd >=3D 0) { + ksft_test_result_fail("empty path without O_EMPTYPATH unexpectedly succe= eded\n"); + close(reopen_fd); + } else { + ksft_test_result_fail("empty path without O_EMPTYPATH: expected ENOENT, = got %m\n"); + } + + reopen_fd =3D openat(opath_fd, "", O_RDONLY | O_EMPTYPATH); + + if (reopen_fd < 0 && errno =3D=3D EINVAL) + ksft_exit_skip("O_EMPTYPATH not supported\n"); + + if (reopen_fd >=3D 0) { + ksft_test_result_pass("O_EMPTYPATH reopens O_PATH fd\n"); + close(reopen_fd); + } else { + ksft_test_result_fail("O_EMPTYPATH failed: %m\n"); + } + + unlink(path); + ksft_finished(); +} diff --git a/tools/testing/selftests/filesystems/openat2/helpers.h b/tools/= testing/selftests/filesystems/openat2/helpers.h index 7ca54c718c45..3f01fb68c5a6 100644 --- a/tools/testing/selftests/filesystems/openat2/helpers.h +++ b/tools/testing/selftests/filesystems/openat2/helpers.h @@ -15,47 +15,14 @@ #include #include #include +#include #include "kselftest_harness.h" =20 #define BUILD_BUG_ON(e) ((void)(sizeof(struct { int:(-!!(e)); }))) =20 -/* - * Arguments for how openat2(2) should open the target path. If @resolve is - * zero, then openat2(2) operates very similarly to openat(2). - * - * However, unlike openat(2), unknown bits in @flags result in -EINVAL rat= her - * than being silently ignored. @mode must be zero unless one of {O_CREAT, - * O_TMPFILE} are set. - * - * @flags: O_* flags. - * @mode: O_CREAT/O_TMPFILE file mode. - * @resolve: RESOLVE_* flags. - */ -struct open_how { - __u64 flags; - __u64 mode; - __u64 resolve; -}; - #define OPEN_HOW_SIZE_VER0 24 /* sizeof first published struct */ #define OPEN_HOW_SIZE_LATEST OPEN_HOW_SIZE_VER0 =20 -#ifndef RESOLVE_IN_ROOT -/* how->resolve flags for openat2(2). */ -#define RESOLVE_NO_XDEV 0x01 /* Block mount-point crossings - (includes bind-mounts). */ -#define RESOLVE_NO_MAGICLINKS 0x02 /* Block traversal through procfs-style - "magic-links". */ -#define RESOLVE_NO_SYMLINKS 0x04 /* Block traversal through all symlinks - (implies OEXT_NO_MAGICLINKS) */ -#define RESOLVE_BENEATH 0x08 /* Block "lexical" trickery like - "..", symlinks, and absolute - paths which escape the dirfd. */ -#define RESOLVE_IN_ROOT 0x10 /* Make all jumps to "/" and ".." - be scoped inside the dirfd - (similar to chroot(2)). */ -#endif /* RESOLVE_IN_ROOT */ - __maybe_unused static bool needs_openat2(const struct open_how *how) { --=20 2.54.0