erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-10-11 08:27:36 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
spiegel_podman/pkg
History
Matthew Heon 57c5e2246e Swap bind address for gvproxy to localhost-only 
This resolves CVE-2021-4024, where an attacker could access the
API externally and forward any port they desired to the VM from
`podman machine`.

[NO NEW TESTS NEEDED] gvproxy is not tested directly at this
time.

Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-12-03 09:50:51 -05:00
..
annotations
api Log Apache access_log-like entries at Info level [NO NEW TESTS NEEDED] 2021-11-12 11:08:25 -05:00
auth Normalize auth key before calling SetAuthentication 2021-09-09 09:17:22 +02:00
autoupdate [3.4] vendor c/common@v0.44.1 2021-09-20 13:29:14 +02:00
bindings Fix bindings container log test 2021-11-12 11:08:25 -05:00
cgroups cgroups: use SessionBusPrivateNoAutoStartup 2021-11-12 11:08:25 -05:00
channel channel: simplify implementation 2021-05-06 11:51:15 +02:00
checkpoint Support checkpoint/restore with pods 2021-07-27 16:10:44 +02:00
copy support container to container copy 2021-07-27 15:32:23 +02:00
criu Support checkpoint/restore with pods 2021-07-27 16:10:44 +02:00
ctime
domain container create: fix --tls-verify parsing 2021-11-30 14:48:26 +01:00
env Generate kube should'd add podman default environment vars 2021-09-22 16:49:15 -04:00
errorhandling Handle HTTP 409 error messages properly for Pod actions 2021-11-12 11:08:25 -05:00
hooks [CI:DOCS] oci-hooks.5.md: fixup section in header 2021-10-19 15:56:35 -04:00
inspect bump go module to v3 2021-02-22 09:03:51 +01:00
kubeutils Globally replace http:// with https:// 2021-08-27 06:14:46 -04:00
lookup
machine Swap bind address for gvproxy to localhost-only 2021-12-03 09:50:51 -05:00
namespaces [NO TESTS NEEDED] Shrink the size of podman-remote 2021-03-29 09:49:45 -04:00
netns Globally replace http:// with https:// 2021-08-27 06:14:46 -04:00
network Split libpod/network package 2021-03-15 14:01:52 +01:00
parallel bump go module to v3 2021-02-22 09:03:51 +01:00
ps Ensure podman ps --sync functions 2021-10-19 14:13:59 -04:00
resolvconf bump go module to v3 2021-02-22 09:03:51 +01:00
rootless podman machine: do not join userns 2021-09-29 16:39:29 -04:00
rootlessport remove rootlessport socket to prevent EADDRINUSE 2021-09-16 09:42:14 -04:00
seccomp
selinux
servicereaper podman service reaper 2021-07-02 19:00:36 +02:00
signal
specgen volumes: be more tolerant and fix infinite loop 2021-11-08 10:17:06 +01:00
specgenutil podman run --memory=0 ... should not set memory limit 2021-11-12 11:08:25 -05:00
systemd systemd: replace multi-user with default.target 2021-12-01 09:41:37 +01:00
terminal Fix #11444: remote breaks with stdout redirection 2021-09-13 17:42:48 +03:00
timetype
trust
util Spell "build linux darwin" as "build !windows". 2021-09-03 13:38:14 +03:00