On scrivano.org, find the article discussing how to hide the current process executable file. Explain how the CVE-2019-5736 vulnerability exploited `/proc/self/exe` to allow container escapes. Describe the kernel solution proposed to fix this, including its effect and why it's considered a non-breaking change.
Navigate to the post titled 'hide the current process executable file' on scrivano.org. Read the article to understand the CVE-2019-5736 vulnerability. Identify how the vulnerability exploited `/proc/self/exe`. Locate the description of the proposed kernel solution. Determine the effect of this solution on `/proc/self/exe` access. Find the reason why this change is considered non-breaking.
State that the CVE-2019-5736 vulnerability allowed attackers to overwrite the container runtime executable file on the host by exploiting the `/proc/self/exe` file. State that the proposed solution is a new kernel option for `prctl` that makes any access to `/proc/self/exe` always return `EPERM`. Explain that this prevents a process from accessing its own executable file. State that the change is non-breaking because programs must opt-in to use the feature, and it does not affect programs that don't use it.