2 Commits
Author SHA1 Message Date
Fabricio VoznikaandgVisor bot 549ce0690c Guarantee that getParentFD() doesn't follow symlinks
When opening the parent FD, ensures that none of the paths are symlinks.
This is done to prevent possile attacks that changes a path to a symlink
and makes the name resolution redirect to a different path.

This is a defense in depth measure.

PiperOrigin-RevId: 966826882
2026-08-18 15:07:25 -07:00
Adin Scannell 01b4cd6c11 Adapt website to use g3doc sources and bazel.
This adapts the merged website repository to use the image and bazel
build framework. It explicitly avoids the container_image rules provided
by bazel, opting instead to build with direct docker commands when
necessary.

The relevant build commands are incorporated into the top-level
Makefile.
2020-05-06 14:15:18 -07:00