From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Sun, 14 Dec 2025 12:34:17 +0000 (+0100)
Subject: namespace: Clone root dir descriptor before use (#39939)
X-Git-Tag: v259~30
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b96dccaba3249f5d7b9ad3acab79da74d32949c2;p=thirdparty%2Fsystemd.git

namespace: Clone root dir descriptor before use (#39939)

Before doing anything with the root directory file descriptor, let's
make sure we clone it first so that the caller can't mess with mount fd
attributes via mount_setattr() anymore.

We clone during parsing instead of in executor so that the caller can't
mess with the mount fd between invocations.
---

b96dccaba3249f5d7b9ad3acab79da74d32949c2