Post #1887746

@swick Insightful post. Snapd has had a paranoid approach to fd security but even with that ww did commit a few CVEs over the years. I agree that starting with current kernel APIs would be far easier to do the right thing. The openat2 and the new mount system calls are way better if you can depend on them. Out of the missing set I wish kernel had an openat flag that makes atomic chown, and similar feature for mkdirat. Best regards!