David Lönnhager c78d774357 Ignore TALPID_CGROUP2_FS and TALPID_NET_CLS_MOUNT_DIR if setuid bit ...

Without this, mullvad-exclude could be used to open and write to
cgroup.procs anywhere on the filesystem, as its setuid bit is set.

In reality, this only affected cgroup2, which is feature-gated and
is disabled right now.

This fixes the advisory GHSA-6m4p-ggr4-5f76.

2026-09-23 10:00:34 +02:00

..

src

Ignore TALPID_CGROUP2_FS and TALPID_NET_CLS_MOUNT_DIR if setuid bit

2026-09-23 10:00:34 +02:00

Cargo.toml

Ignore TALPID_CGROUP2_FS and TALPID_NET_CLS_MOUNT_DIR if setuid bit

2026-09-23 10:00:34 +02:00