Roberto Campesato fff674a27d vmm: prefer /dev/userfaultfd over the syscall ...

Prefer /dev/userfaultfd (Linux 6.1+) over the userfaultfd(2) syscall
for obtaining userfaultfd file descriptors.  The device path bypasses
the capable(CAP_SYS_PTRACE) and vm.unprivileged_userfaultfd sysctl
checks that block the syscall in user-namespaced containers, using
file permissions instead.

Falls back to the syscall on older kernels or when the device node
does not exist.

Signed-off-by: Roberto Campesato <render@metalabs.org>
Assisted-by: Claude:claude-opus-4-6

2026-05-07 21:37:46 +00:00

..

src

vmm: prefer /dev/userfaultfd over the syscall

2026-05-07 21:37:46 +00:00

build.rs

build: Add "fuzzing" as a valid cfg(..) attribute

2024-05-08 08:10:28 +00:00

Cargo.toml

vmm: Introduce kernel hashes measured boot

2026-05-01 20:28:55 +00:00