containers
/
podman
mirror of https://github.com/containers/podman.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
podman/pkg/specgen/generate
History
Daniel J Walsh 22a8b68866
make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false 
The intention of --read-only-tmpfs=fals when in --read-only mode was to
not allow any processes inside of the container to write content
anywhere, unless the caller also specified a volume or a tmpfs. Having
/dev and /dev/shm writable breaks this assumption.

Fixes: https://github.com/containers/podman/issues/12937

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 		2023-07-30 06:09:30 -04:00
..
kube Add missing reserved annotation support to `play` 2023-07-17 14:06:23 -04:00
config_linux.go pkg/specgen: Don't crash for device spec with... 2023-07-24 17:22:36 +01:00
config_linux_cgo.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
config_linux_nocgo.go go fmt: use go 1.18 conditional-build syntax 2022-03-18 09:11:53 +01:00
config_linux_test.go pkg/specgen: Don't crash for device spec with... 2023-07-24 17:22:36 +01:00
container.go run,create: modify `--env-merge` behavior for non-existent vars 2023-06-22 15:42:55 +05:30
container_create.go make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false 2023-07-30 06:09:30 -04:00
namespaces.go rootless: use default_rootless_network_cmd config 2023-06-29 09:46:25 +02:00
namespaces_freebsd.go Fix stutters 2022-09-10 07:52:00 -04:00
namespaces_linux.go Stop recording annotations set to false 2022-12-19 16:07:33 -05:00
namespaces_unsupported.go specgen/generate: Add support for FreeBSD 2022-08-30 11:24:57 +01:00
oci.go set max ulimits for rootless on each start 2023-05-31 09:20:31 +00:00
oci_freebsd.go Use constants for mount types 2023-07-14 07:17:21 -04:00
oci_linux.go make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false 2023-07-30 06:09:30 -04:00
oci_unsupported.go specgen/generate: Add support for FreeBSD 2022-08-30 11:24:57 +01:00
pause_image.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
pod_create.go Pods now return what containers were removed with them 2023-06-01 16:24:59 -04:00
pod_create_test.go Allow namespace path network option for pods. 2022-11-04 11:26:06 +01:00
ports.go Fixes port collision issue on use of --publish-all 2023-01-30 14:52:57 -07:00
ports_bench_test.go fix a number of errcheck issues 2022-03-22 13:15:28 +01:00
ports_test.go bump golangci-lint to v1.50.1 2022-12-15 13:39:56 +01:00
security_freebsd.go specgen/generate: Add support for FreeBSD 2022-08-30 11:24:57 +01:00
security_linux.go source code comments and docs: fix typos, language, Markdown layout 2023-05-22 07:52:16 +02:00
security_unsupported.go specgen/generate: Add support for FreeBSD 2022-08-30 11:24:57 +01:00
storage.go Use constants for mount types 2023-07-14 07:17:21 -04:00
validate.go Do not display the resource limits warning message 2023-04-11 19:30:59 +09:00