tree 7e45d9290d094cd0bb2a07c2441e98479b2fd765
parent 26815151008e863b754506da4a2ac7da471672c9
author Nick Kralevich <nnk@google.com> 1456357852 -0800
committer Nick Kralevich <nnk@google.com> 1456432731 -0800

init: harden socket creation against symlinks

Instead of using chown, use the symlink safe lchown.

Instead of using chmod, use the symlink safe fchmodat
with AT_SYMLINK_NOFOLLOW.

Fix a bug where the SELinux filesystem creation context may
not be restored, and some memory not freed, if bind() fails.

Check the return values from the chown/chmod calls and unlink
the files if it ever fails.

(cherrypicked from commit ab5629c197ae278992039a9685df047fe34232b8)

Bug: 27337831
Change-Id: I28c5f4dee55aa706437eb51ad403c1fbf56138de