erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-10-18 11:57:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
spiegel_podman/libpod
History
Matthew Heon 02264d597f Add support for 'exec', 'suid', 'dev' mount flags 
Previously, we explicitly set noexec/nosuid/nodev on every mount,
with no ability to disable them. The 'mount' command on Linux
will accept their inverses without complaint, though - 'noexec'
is counteracted by 'exec', 'nosuid' by 'suid', etc. Add support
for passing these options at the command line to disable our
explicit forcing of security options.

This also cleans up mount option handling significantly. We are
still parsing options in more than one place, which isn't good,
but option parsing for bind and tmpfs mounts has been unified.

Fixes: #3819
Fixes: #3803

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-08-28 14:28:18 -04:00
..
common Set blob cache directory based on GraphDriver 2019-03-29 08:27:33 -04:00
define Add conmon probe to runtime construction 2019-08-08 20:24:19 -04:00
driver removMergeDir from inspect result if not mounted 2019-08-13 15:13:20 -04:00
events performance fix for podman events with large journalds 2019-08-14 09:30:12 -05:00
image image: remove unused Decompose method 2019-08-28 08:59:33 -05:00
layers Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
lock trivial cleanups from golang 2019-07-03 15:41:33 -05:00
logs golangci-lint pass number 2 2019-07-11 09:13:06 -05:00
boltdb_state.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
boltdb_state_internal.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
boltdb_state_linux.go podman-remote inspect 2019-01-18 15:43:11 -06:00
boltdb_state_unsupported.go podman-remote inspect 2019-01-18 15:43:11 -06:00
common_test.go code cleanup 2019-07-08 09:18:11 -05:00
container.go Add comment to describe postConfigureNetNS 2019-07-30 23:28:52 +00:00
container.log.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_api.go exec: run with user specified on container start 2019-08-20 11:44:27 -04:00
container_commit.go Fix commit --changes env=X=Y 2019-07-26 16:04:17 -07:00
container_graph.go generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
container_graph_test.go generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
container_inspect.go Print Pod ID in podman inspect output 2019-08-01 11:34:36 -04:00
container_internal.go generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
container_internal_linux.go cgroup: fix regression when running systemd 2019-08-06 19:46:34 +02:00
container_internal_test.go Potentially breaking: Make hooks sort order locale-independent 2019-04-09 21:08:44 +02:00
container_internal_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
container_linux.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
container_log_linux.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_log_unsupported.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_top_linux.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_top_unsupported.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_unsupported.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
diff.go Add function to get a filtered tarstream diff 2019-07-11 14:43:34 +02:00
events.go get last container event 2019-07-07 08:54:20 -05:00
healthcheck.go Implement conmon exec 2019-07-22 15:57:23 -04:00
healthcheck_linux.go golangci-lint pass number 2 2019-07-11 09:13:06 -05:00
healthcheck_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
in_memory_state.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
info.go add eventlogger to info 2019-08-02 20:05:27 -05:00
kube.go Add capability functionality to play kube 2019-08-01 15:47:45 -04:00
mounts_linux.go set root propagation based on volume properties 2018-11-26 13:55:02 +01:00
networking_linux.go networking: use firewall plugin 2019-08-19 16:16:06 +02:00
networking_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
oci.go Merge pull request #3760 from rhatdan/auth 2019-08-19 21:16:06 +02:00
oci_attach_linux.go golangci-lint cleanup 2019-07-23 10:13:04 -05:00
oci_attach_linux_cgo.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_attach_linux_nocgo.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_attach_unsupported.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_internal_linux.go Merge pull request #3760 from rhatdan/auth 2019-08-19 21:16:06 +02:00
oci_linux.go Use GetRuntimeDir to setup auth.json for login 2019-08-12 14:11:53 -04:00
oci_unsupported.go Implement conmon exec 2019-07-22 15:57:23 -04:00
options.go Add support for 'exec', 'suid', 'dev' mount flags 2019-08-28 14:28:18 -04:00
pod.go Allow customizing pod hostname 2019-08-18 03:48:40 +00:00
pod_api.go generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
pod_internal.go remove libpod from main 2019-06-25 13:51:24 -05:00
pod_top_linux.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
pod_top_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime.go Add an integration test for systemd in a container 2019-08-28 09:28:49 -04:00
runtime_cstorage.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_ctr.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
runtime_img.go make rmi messages more compatible with docker 2019-08-08 20:05:55 -05:00
runtime_img_test.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
runtime_migrate.go code cleanup 2019-07-08 09:18:11 -05:00
runtime_migrate_unsupported.go system: migrate stops the pause process 2019-05-17 20:48:25 +02:00
runtime_pod.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_pod_infra_linux.go Merge pull request #3836 from chenzhiwei/hostname 2019-08-19 13:33:15 +02:00
runtime_pod_linux.go Fix error message on podman stats on cgroups v1 rootless environments 2019-08-19 07:41:50 -04:00
runtime_pod_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_renumber.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
runtime_volume.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
runtime_volume_linux.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
runtime_volume_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
state.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
state_test.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
stats.go Build fix for 32-bit systems. 2019-07-30 12:25:36 -04:00
stats_config.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
stats_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
storage.go remove libpod from main 2019-06-25 13:51:24 -05:00
util.go code cleanup 2019-07-08 09:18:11 -05:00
util_linux.go pkg/cgroups: use DBUS session when rootless 2019-08-14 15:46:07 +02:00
util_test.go Stage3 Image Library 2018-03-14 20:21:31 +00:00
util_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
volume.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
volume_inspect.go Fix typos 2019-08-02 15:30:31 -04:00
volume_internal.go Remove locks from volumes 2019-02-21 10:51:42 -05:00