containers
/
podman
mirror of https://github.com/containers/podman.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
13,557 Commits 51 Branches 248 Tags 259 MiB
Commit Graph

3 Commits

Author SHA1 Message Date
baude 6246942d37 Increase security and performance when looking up groups 
We implement the securejoin method to make sure the paths to /etc/passwd and
/etc/group are not symlinks to something naughty or outside the container
image. And then instead of actually chrooting, we use the runc functions to
get information about a user.  The net result is increased security and
a a performance gain from 41ms to 100us.

Signed-off-by: baude <bbaude@redhat.com>
 2018-10-25 06:42:43 -05:00
Daniel J Walsh af64e10400 Vendor in lots of kubernetes stuff to shrink image size 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>

Closes: #554
Approved by: mheon
 2018-03-27 18:09:12 +00:00
baude be9ed1cfac Privileged containers should inherit host devices 
When running a privileged container, it should inherit the same
devices the host has.

Signed-off-by: baude <bbaude@redhat.com>

Closes: #330
Approved by: mheon
 2018-02-15 00:20:47 +00:00