spiegel_podman/pkg/rootless
tomsweeneyredhat 3db7f4caf2 [v4.4.1-rhel] Add file switch for pre-exec hooks
The long term goal was to provide the customer with a way to turn on the
preexec_hooks processing of scripts by having some kind of configuration
that could be read. I had tried putting it into containers.conf to
start, but that turned out to be unyieldly quickly, and time is of
the essence for this fix. That is mostly due to the fact that this
code is preexecution and in C, the containers.conf file is read in
Go much further down the stack.

After first trying this process using an ENVVAR, I have
thought it over and chatted with others, and will now look for a
/etc/containers/podman_preexec_hooks.txt file to exist. If the admin
had put one in there, we will then process the files in the
directories /usr/libexec/podman/pre-exec-hooks
and /etc/containers/pre-exec-hooks.

Thoughts/suggestions gratefully accepted. This will be a 8.8/9.2 ZeroDay
fix and will need to be backported to the v4.4.1-rhel branch.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2023-04-26 10:12:54 -04:00
..
rootless.go bump golangci-lint to v1.50.1 2022-12-15 13:39:56 +01:00
rootless_freebsd.c pkg/rootless: Implement rootless.IsFdInherited on FreeBSD 2022-11-15 08:18:41 +00:00
rootless_freebsd.go pkg/rootless: Change error text ... 2022-12-15 17:40:21 +00:00
rootless_linux.c [v4.4.1-rhel] Add file switch for pre-exec hooks 2023-04-26 10:12:54 -04:00
rootless_linux.go rootless: always create userns with euid != 0 2022-12-20 13:33:23 +01:00
rootless_test.go rootless: improve automatic range split 2021-05-05 18:03:10 +02:00
rootless_unsupported.go pkg/rootless: Implement rootless.IsFdInherited on FreeBSD 2022-11-15 08:18:41 +00:00