mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-08-05 08:25:40 +00:00
3db7f4caf2
The long term goal was to provide the customer with a way to turn on the preexec_hooks processing of scripts by having some kind of configuration that could be read. I had tried putting it into containers.conf to start, but that turned out to be unyieldly quickly, and time is of the essence for this fix. That is mostly due to the fact that this code is preexecution and in C, the containers.conf file is read in Go much further down the stack. After first trying this process using an ENVVAR, I have thought it over and chatted with others, and will now look for a /etc/containers/podman_preexec_hooks.txt file to exist. If the admin had put one in there, we will then process the files in the directories /usr/libexec/podman/pre-exec-hooks and /etc/containers/pre-exec-hooks. Thoughts/suggestions gratefully accepted. This will be a 8.8/9.2 ZeroDay fix and will need to be backported to the v4.4.1-rhel branch. Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com> |
||
|---|---|---|
| .. | ||
| annotations | ||
| api | ||
| auth | ||
| autoupdate | ||
| bindings | ||
| channel | ||
| checkpoint | ||
| copy | ||
| criu | ||
| ctime | ||
| domain | ||
| env | ||
| errorhandling | ||
| inspect | ||
| k8s.io | ||
| lookup | ||
| machine | ||
| namespaces | ||
| parallel | ||
| ps | ||
| rctl | ||
| rootless | ||
| rootlessport | ||
| seccomp | ||
| selinux | ||
| servicereaper | ||
| signal | ||
| specgen | ||
| specgenutil | ||
| systemd | ||
| terminal | ||
| timetype | ||
| trust | ||
| util | ||