spiegel_podman/libpod/container_stat_linux.go
pooyanazad ac136b7999 libpod: pin volume subpaths during copy
Keep the selected subpath mounted while stat and copy use it so a shared volume cannot redirect the copy root with a symlink. Release the mount after each operation and cover source replacement in a regression test.

Signed-off-by: pooyanazad <pooyan.azadparvar@gmail.com>
2026-09-30 18:21:36 +02:00

42 lines
1.3 KiB
Go

//go:build !remote
package libpod
import (
"context"
"go.podman.io/buildah/copier"
"go.podman.io/podman/v6/libpod/define"
)
// statInsideMount stats the specified path *inside* the container's mount and PID
// namespace. It returns the file info along with the resolved root ("/") and
// the resolved path (relative to the root).
func (c *Container) statInsideMount(ctx context.Context, containerPath string) (*copier.StatForItem, pathResolution, error) {
resolvedRoot := "/"
resolvedPath := c.pathAbs(containerPath)
var statInfo *copier.StatForItem
err := c.joinMountAndExec(
func() error {
var statErr error
statInfo, statErr = secureStat(ctx, resolvedRoot, resolvedPath)
return statErr
},
)
return statInfo, pathResolution{root: resolvedRoot, path: resolvedPath}, err
}
// Calls either statOnHost or statInsideMount depending on whether the
// container is running
func (c *Container) statInContainer(ctx context.Context, mountPoint string, containerPath string) (*copier.StatForItem, pathResolution, error) {
if c.state.State == define.ContainerStateRunning {
// If the container is running, we need to join it's mount namespace
// and stat there.
return c.statInsideMount(ctx, containerPath)
}
// If the container is NOT running, we need to resolve the path
// on the host.
return c.statOnHost(ctx, mountPoint, containerPath)
}