From: "Theo de Raadt" Subject: Re: Locking down openat(2) and friends with O_BELOW and F_BELOW To: tech@openbsd.org Date: Mon, 05 Oct 2026 11:12:01 -0600 Any openat of a locked dirfd is supposed to result in a locked descriptor, so I may be missing some code.