kubernetes/vendor/github.com/cyphar/filepath-securejoin/openat2_linux.go

var hasOpenat2 …

func scopedLookupShouldRetry(how *unix.OpenHow, err error) bool { … }

const scopedLookupMaxRetries …

func openat2File(dir *os.File, path string, how *unix.OpenHow) (*os.File, error) { … }

func lookupOpenat2(root *os.File, unsafePath string, partial bool) (*os.File, string, error) { … }

// partialLookupOpenat2 is an alternative implementation of
// partialLookupInRoot, using openat2(RESOLVE_IN_ROOT) to more safely get a
// handle to the deepest existing child of the requested path within the root.
func partialLookupOpenat2(root *os.File, unsafePath string) (*os.File, string, error) { … }