source/pkg/compactscan/preflight_open_unix.go

//go:build unix

package compactscan

import (
	"os"
	"syscall"
)

// O_NONBLOCK prevents an attacker racing a validated regular member into a
// FIFO or device from hanging preflight while the descriptor is opened.
func openPreflightFile(root *os.Root, name string) (*os.File, error) {
	return root.OpenFile(name, os.O_RDONLY|syscall.O_NONBLOCK, 0)
}