podman/pkg/specgen/generate
Daniel J Walsh 4fd1965ab4
Add filepath glob support to --security-opt unmask
Want to allow users to specify --security-opt unmask=/proc/*.
This allows us to run podman within podman more securely, then
specifing umask=all, also gives the user more flexibilty.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-05-04 14:40:43 -04:00
..
kube Fixes from make codespell 2021-04-21 13:16:33 -04:00
config_linux.go Add filepath glob support to --security-opt unmask 2021-05-04 14:40:43 -04:00
config_linux_cgo.go bump go module to v3 2021-02-22 09:03:51 +01:00
config_linux_nocgo.go bump go module to v3 2021-02-22 09:03:51 +01:00
config_linux_test.go Add filepath glob support to --security-opt unmask 2021-05-04 14:40:43 -04:00
container.go bump go module to v3 2021-02-22 09:03:51 +01:00
container_create.go Merge pull request #10119 from rhatdan/timeout 2021-04-27 16:47:32 -04:00
namespaces.go Ensure that `--userns=keep-id` sets user in config 2021-04-06 09:18:46 -04:00
oci.go replace local mount consts with libpod/define 2021-03-07 12:03:34 +01:00
pod_create.go Fix pod infra container cni network setup 2021-04-01 17:27:03 +02:00
ports.go Improvements for machine 2021-03-25 11:02:33 -05:00
security.go security: use the bounding caps with --privileged 2021-03-19 15:17:11 +01:00
storage.go Ensure mount destination is clean, no trailing slash 2021-04-18 09:57:04 -06:00
validate.go bump go module to v3 2021-02-22 09:03:51 +01:00