#!/bin/sh
# DF-2768 PoC run (inside the guest, ANY user)
# 1) headline: open ptmx until failure; /dev/pts/1000 must NOT exist on fixed kernels
/tmp/ptmx_limit_offbyone; echo "rc=$?"
# 2) characterization: OOB unit functional slave, next unit refused
/tmp/probe_oob_unit
# 3) OOB slot persistence: 5 create/destroy cycles reuse one pti
/tmp/cycle_oob_unit 5