On scrivano.org, find the article about hiding the current process executable file. Explain how the `/proc/self/exe` file was exploited in a container escape vulnerability. Describe the kernel solution proposed to fix this issue, including its general effect and why it's considered a non-breaking change.
Navigate to scrivano.org. Locate and click on the article titled 'hide the current process executable file'. Read the article to identify how the `/proc/self/exe` file was exploited in a container escape vulnerability. Find the description of the kernel solution proposed to address this vulnerability, including its name. Determine the general effect of this kernel solution on `/proc/self/exe` access. Identify the reason why this kernel change is considered non-breaking.
State that the vulnerability allowed attackers to overwrite the container runtime executable file on the host by exploiting `/proc/self/exe`. State that the proposed solution is a new kernel option for `prctl` called `PR_SET_MM_EXE_DISABLE`. Explain that this solution makes access to `/proc/self/exe` always return an error (e.g., `EPERM`), effectively preventing a process from accessing its own executable file. State that the change is non-breaking because programs must opt-in to use the feature, and it does not affect programs that don't use it.