erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-08-05 00:15:44 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
spiegel_podman/utils
History
Exact
Aditya R 017535d05e volume,container: chroot to source before exporting content 
* Utils must support higher level API to create Tar with chrooted into
  directory
* Volume export: use TarwithChroot instead of Tar so we can make sure no
  symlink can be exported by tar if it exists outside of the source
directory.
* container export: use chroot and Tar instead of Tar so we can make sure no
  symlink can be exported by tar if it exists outside of the mointPoint.

[NO NEW TESTS NEEDED]
[NO TESTS NEEDED]
Race needs combination of external/in-container mechanism which is hard to repro in CI.

CVE: https://access.redhat.com/security/cve/CVE-2023-0778

Signed-off-by: Aditya R <arajan@redhat.com>

MH: Cherry-pick to v4.4.1-rhel per RHBZ 2169618

Signed-off-by: Matt Heon <mheon@redhat.com>
2023-02-17 11:33:30 -05:00
..
testdata Support running podman under a root v2 cgroup 2022-05-21 09:28:52 -05:00
ports.go hack/test/utils: switch to golang native error wrapping 2022-07-05 12:13:33 +02:00
utils.go volume,container: chroot to source before exporting content 2023-02-17 11:33:30 -05:00
utils_supported.go utils: Enable cgroup utils for FreeBSD 2022-11-14 14:22:36 +00:00
utils_test.go utils: Enable cgroup utils for FreeBSD 2022-11-14 14:22:36 +00:00
utils_windows.go hack/test/utils: switch to golang native error wrapping 2022-07-05 12:13:33 +02:00