Function openat2_beneath

syscall.c:1701–1708

openat2(RESOLVE_BENEATH) via the raw syscall, gated on openat2_usable() so a * seccomp filter that traps openat2 with SIGSYS (e.g. the Android sandbox) * makes us report ENOSYS and fall back rather than killing the process. Only * the openat2 call is gated here; a plain openat() is always safe to attempt. */

 * makes us report ENOSYS and fall back rather than killing the process.  Only
 * the openat2 call is gated here; a plain openat() is always safe to attempt. */
static int openat2_beneath(int dirfd, const char *path, const struct open_how *how)
{
	if (!openat2_usable()) {
		errno = ENOSYS;
		return -1;
	}
	return syscall(SYS_openat2, dirfd, path, how, sizeof *how);
}

static int secure_relative_open_linux(const char *basedir, const char *relpath, int flags, mode_t mode)
{