Comment on Implement unprivileged chrootparentComments−karatinversion5yHe was - TOCTOU has its own wiki page [1]. These can be nastier, because they don't require the attacker to be able to submit strings or file names.[1] https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use−tines5yI guess I'm not sure how you would use open() that would expose a TOCTOU bug that openat () wouldn't. Can you give an example?
Comments
He was - TOCTOU has its own wiki page [1]. These can be nastier, because they don't require the attacker to be able to submit strings or file names.
[1] https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use
I guess I'm not sure how you would use open() that would expose a TOCTOU bug that openat () wouldn't. Can you give an example?