spiegel_podman/pkg
Matthew Heon 3eb88d0be0 Swap bind address for gvproxy to localhost-only
This resolves CVE-2021-4024, where an attacker could access the
API externally and forward any port they desired to the VM from
`podman machine`.

[NO NEW TESTS NEEDED] gvproxy is not tested directly at this
time.

Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-12-06 09:32:34 -05:00
..
annotations Spelling 2020-12-22 13:34:31 -05:00
api Log Apache access_log-like entries at Info level [NO NEW TESTS NEEDED] 2021-11-12 11:08:25 -05:00
auth Normalize auth key before calling SetAuthentication 2021-09-09 09:17:22 +02:00
autoupdate [3.4] vendor c/common@v0.44.1 2021-09-20 13:29:14 +02:00
bindings Fix bindings container log test 2021-11-12 11:08:25 -05:00
cgroups cgroups: use SessionBusPrivateNoAutoStartup 2021-11-12 11:08:25 -05:00
channel channel: simplify implementation 2021-05-06 11:51:15 +02:00
checkpoint Support checkpoint/restore with pods 2021-07-27 16:10:44 +02:00
copy support container to container copy 2021-07-27 15:32:23 +02:00
criu Support checkpoint/restore with pods 2021-07-27 16:10:44 +02:00
ctime Re-add int64 casts for ctime 2019-07-23 15:43:40 -04:00
domain podman-generate-kube - remove empty structs from YAML 2021-11-12 11:08:25 -05:00
env Generate kube should'd add podman default environment vars 2021-09-22 16:49:15 -04:00
errorhandling Handle HTTP 409 error messages properly for Pod actions 2021-11-12 11:08:25 -05:00
hooks [CI:DOCS] oci-hooks.5.md: fixup section in header 2021-10-19 15:56:35 -04:00
inspect bump go module to v3 2021-02-22 09:03:51 +01:00
kubeutils Globally replace http:// with https:// 2021-08-27 06:14:46 -04:00
lookup Enable whitespace linter 2021-02-11 23:01:56 +01:00
machine Swap bind address for gvproxy to localhost-only 2021-12-06 09:32:34 -05:00
namespaces [NO TESTS NEEDED] Shrink the size of podman-remote 2021-03-29 09:49:45 -04:00
netns Globally replace http:// with https:// 2021-08-27 06:14:46 -04:00
network Split libpod/network package 2021-03-15 14:01:52 +01:00
parallel bump go module to v3 2021-02-22 09:03:51 +01:00
ps Ensure podman ps --sync functions 2021-10-19 14:13:59 -04:00
resolvconf bump go module to v3 2021-02-22 09:03:51 +01:00
rootless podman machine: do not join userns 2021-09-29 16:39:29 -04:00
rootlessport remove rootlessport socket to prevent EADDRINUSE 2021-09-16 09:42:14 -04:00
seccomp Spelling 2020-12-22 13:34:31 -05:00
selinux Fix SELinux functions names to not be repetitive 2020-04-23 15:57:34 -04:00
servicereaper podman service reaper 2021-07-02 19:00:36 +02:00
signal Fix build for mips architecture follow-up 2021-01-07 15:04:22 +01:00
specgen secret: honor custom target for secrets with run 2021-12-02 11:26:17 -05:00
specgenutil secret: honor custom target for secrets with run 2021-12-02 11:26:17 -05:00
systemd Replace 'an user' => 'a user' 2021-11-12 11:08:25 -05:00
terminal Fix #11444: remote breaks with stdout redirection 2021-09-13 17:42:48 +03:00
timetype make lint: enable gocritic 2020-01-13 14:27:02 +01:00
trust Enable whitespace linter 2021-02-11 23:01:56 +01:00
util Spell "build linux darwin" as "build !windows". 2021-09-03 13:38:14 +03:00