Secure Path Operations and Libpathrs
Talkat Open Source Summit Japan + AI_dev: Open Source GenAI & ML Summit + Automotive Linux Summit 2025 · 2025-12-08..12-10·
summary
Shows concrete fixes for multiple recent runc CVEs: replaces fragile path string resolution with libpathrs Rust library and a Go reimplementation, uses file-descriptor-based APIs (openat2 / O_PATH and the fd-based mount API) instead of naive opens, tightens checks on bind mounts and /proc writes, validates dev/ptmx and dev/null sources, and prevents core_pattern and proc sys trigger host escapes caused by symlink and bind-mount races. Demonstrates working patches and the remaining migration work.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:29Path safety in Linux
- 8:23Previous path security approaches
- 11:11File descriptor necessity
- 15:45Strict path safety and vulnerabilities
- 23:08Process file attack solutions
- 27:01Libpathrs library
- 31:15Threat models and runc future work
- 37:13AppArmor nested container security
related talks
44mPath Safety in the Trenches
30mPathless First: Redefining Runc Container Security Against ProcFS-Based Attacks
29mSecuring Container Runtimes -- How Hard Can It Be?
45mSecuring Container Runtimes -- How Hard Can It Be?
19mCounterexamples in Safe Rust
34mExploiting a Slightly Peculiar Volume Configuration with SIG-Honk
26mUnix systems programming in Rust
45mBuilding Safe and Secure Systems in Rust