pash-openai 22dea11020
Allow unrelated namespace mounts in Linux sandbox socket checks ( #46535 ) ...
## Why
Namespace mounts can have roots such as `mnt:[inode]` or `net:[inode]` that are not filesystem paths. Treating every mount root as a path rejects these unrelated mounts and prevents sandbox startup.
## What changed
Parse mount roots as paths only for the daemon socket's filesystem. Continue validating every mount destination and checking mount ancestry, nested mounts, and socket aliases.
## Testing
Add regression cases for namespace mounts, invalid destinations, and socket aliases, both with and without a mount ID. Extend the socket-isolation integration fixture with an unrelated network namespace mount to exercise successful startup and rejection of a real socket alias.
GitOrigin-RevId: 9a1d2a69e5bd3f8d09b1de7cf998ee6d9c6bb980
2026-09-19 00:31:23 +00:00
2026-09-15 02:35:59 +00:00
2026-09-18 22:41:26 +00:00
2026-09-19 00:18:56 +00:00
2026-09-14 22:31:32 +00:00
2026-09-19 00:14:40 +00:00
2026-09-18 23:37:11 +00:00
2026-09-16 16:56:41 +00:00
2026-09-11 20:10:02 +00:00
2026-09-18 00:25:37 +00:00
2026-09-17 00:49:12 +00:00
2026-09-09 03:17:48 +00:00
2026-09-15 19:13:08 +00:00
2026-09-07 16:55:06 +00:00
2026-09-19 00:14:40 +00:00
2026-09-18 00:25:37 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-15 18:52:15 +00:00
2026-09-19 00:18:56 +00:00
2026-09-15 17:32:33 +00:00
2026-09-16 01:01:57 +00:00
2026-09-14 19:12:59 +00:00
2026-09-18 00:59:10 +00:00
2026-09-05 01:25:06 +00:00
2026-09-19 00:00:01 +00:00
2026-09-15 18:23:08 +00:00
2026-09-18 22:40:37 +00:00
2026-09-19 00:19:20 +00:00
2026-09-11 01:57:54 +00:00
2026-09-19 00:14:07 +00:00
2026-09-05 12:17:32 +00:00
2026-09-17 23:35:56 +00:00
2026-09-18 00:51:34 +00:00
2026-09-17 04:37:54 +00:00
2026-09-18 23:58:56 +00:00
2026-09-17 04:23:45 +00:00
2026-09-19 00:00:01 +00:00
2026-09-18 23:07:36 +00:00
2026-09-17 17:59:19 +00:00
2026-09-06 20:52:29 +00:00
2026-09-17 18:56:26 +00:00
2026-09-17 10:02:38 +00:00
2026-09-10 00:26:30 +00:00
2026-09-18 23:17:17 +00:00
2026-09-11 21:59:24 +00:00
2026-09-19 00:31:23 +00:00
2026-09-19 00:14:07 +00:00
2026-09-17 19:42:56 +00:00
2026-09-16 23:26:00 +00:00
2026-09-18 23:58:56 +00:00
2026-09-18 22:29:16 +00:00
2026-09-19 00:18:56 +00:00
2026-09-19 00:00:01 +00:00
2026-09-19 00:00:01 +00:00
2026-09-16 22:43:57 +00:00
2026-09-16 21:15:09 +00:00
2026-09-19 00:18:56 +00:00
2026-09-19 00:18:56 +00:00
2026-09-11 03:16:01 +00:00
2026-09-17 21:25:55 +00:00
2026-09-18 23:59:18 +00:00
2026-09-18 22:29:16 +00:00
2026-09-19 00:20:02 +00:00
2026-09-17 23:35:32 +00:00
2026-09-15 18:06:03 +00:00
2026-09-09 04:00:10 +00:00
2026-09-05 05:21:42 +00:00
2026-09-15 02:33:27 +00:00
2026-09-16 09:03:41 +00:00
2026-09-14 21:06:36 +00:00
2026-09-16 22:33:15 +00:00
2026-09-17 19:34:45 +00:00
2026-09-19 00:30:05 +00:00
2026-09-16 16:56:41 +00:00
2026-09-08 00:13:28 +00:00
2026-09-18 23:59:18 +00:00
2026-09-11 22:09:02 +00:00
2026-09-18 23:17:17 +00:00
2026-09-18 23:25:49 +00:00
2026-09-18 00:36:07 +00:00
2026-09-13 18:53:06 +00:00
2026-09-08 21:19:02 +00:00
2026-09-18 23:07:36 +00:00
2026-09-16 23:26:00 +00:00
2026-09-11 06:45:09 +00:00
22dea11020