spiegel_podman/pkg
Matt Heon 2b2c7a8958 Validate the bind-propagation option to --mount
Similar to github.com/containers/buildah/pull/5761 but not
security critical as Podman does not have an expectation that
mounts are scoped (the ability to write a --mount option is
already the ability to mount arbitrary content into the container
so sneaking arbitrary options into the mount doesn't have
security implications). Still, bad practice to let users inject
anything into the mount command line so let's not do that.

Signed-off-by: Matt Heon <mheon@redhat.com>
2024-10-07 09:37:18 -04:00
..
annotations [v5.2] update golangci-lint to 1.60.1 2024-08-21 12:06:44 -04:00
api [v5.2] set !remote build tags where needed 2024-08-21 12:06:44 -04:00
auth Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
autoupdate [v5.2] update golangci-lint to 1.60.1 2024-08-21 12:06:44 -04:00
bindings [v5.2] golangci-lint: remove most skip dirs 2024-08-21 12:06:44 -04:00
channel bump golangci-lint to v1.50.1 2022-12-15 13:39:56 +01:00
checkpoint restore: fix container restore into pod 2024-06-20 13:24:53 +01:00
copy Bump Go module to v5 2024-02-08 09:35:39 -05:00
criu chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
ctime chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
domain [v5.2] set !remote build tags where needed 2024-08-21 12:06:44 -04:00
emulation chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
env pkg/env.Join(): don't modify passed-in maps 2024-02-29 11:47:44 -05:00
errorhandling Fix typos 2023-02-11 18:23:24 +01:00
farm Fix name for builder in farm connection 2024-07-17 22:31:48 -04:00
fileserver Bump Go module to v5 2024-02-08 09:35:39 -05:00
inspect Bump Go module to v5 2024-02-08 09:35:39 -05:00
k8s.io Bump Go module to v5 2024-02-08 09:35:39 -05:00
lookup Cease using deprecated runc userlookup 2024-02-02 11:02:43 -05:00
machine [v5.2] golangci-lint: make darwin linting happy 2024-08-21 12:06:44 -04:00
namespaces Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
parallel Bump Go module to v5 2024-02-08 09:35:39 -05:00
ps podman ps: fix racy pod name query 2024-07-18 17:34:26 +02:00
rctl Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
rootless pkg/rootless: simplify reexec for container code 2024-07-08 13:28:31 +02:00
seccomp pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
selinux Fix SELinux functions names to not be repetitive 2020-04-23 15:57:34 -04:00
signal refacto: unknown signal return signal number without prefix 2024-02-28 19:45:03 +01:00
specgen pkg/specgen: allow pasta when running inside userns 2024-09-23 10:39:42 +02:00
specgenutil Validate the bind-propagation option to --mount 2024-10-07 09:37:18 -04:00
specgenutilexternal Quadlet container mount - support non key=val options 2023-09-27 16:20:00 +03:00
systemd [v5.2] update golangci-lint to 1.60.1 2024-08-21 12:06:44 -04:00
terminal Fix Lint on Windows and enable the job 2024-02-20 08:06:18 -05:00
timetype Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
trust pkg/trust: use fileutils.(Le|E)xists 2024-04-19 09:52:14 +02:00
util [v5.2] set !remote build tags where needed 2024-08-21 12:06:44 -04:00