bytecodealliance / bytecodealliance/rustix
Executability check (Linux >= 6.13)
Open
enhancement
- Dominant language
- Rust
- Stars
- 2.1k
- Forks
- 294
- Avg merge
- 4h 7m
- Merged PRs (30d)
- 2
Description
https://docs.kernel.org/next/userspace-api/check_exec.html
- [ ] `AT_EXECVE_CHECK`
- for `execveat` which is `rustix_1_0_5::not_implemented::quite_yet` ATM. However we do not need to wait for it, we can just add it to `AtFlags`.
- [ ] `SECBIT_EXEC_RESTRICT_FILE` and `SECBIT_EXEC_DENY_INTERACTIVE` (+ `_LOCKED` variants)
- add to `CapabilitiesSecureBits`
Oblivious it depends on `linux_raw_sys` and `libc` support for those flags.
Contributor guide
Assessment
This issue has not been assessed yet.