podman/pkg/specgenutil
Matt Heon 985b57d9f7 Validate the bind-propagation option to `--mount`
Similar to github.com/containers/buildah/pull/5761 but not
security critical as Podman does not have an expectation that
mounts are scoped (the ability to write a --mount option is
already the ability to mount arbitrary content into the container
so sneaking arbitrary options into the mount doesn't have
security implications). Still, bad practice to let users inject
anything into the mount command line so let's not do that.

Signed-off-by: Matt Heon <mheon@redhat.com>
2024-10-04 09:07:51 -04:00
..
createparse.go Bump Go module to v5 2024-02-08 09:35:39 -05:00
ports.go pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
ports_test.go Unit tests for pkg/specgenutil pkg/signal 2022-04-25 14:48:39 -05:00
specgen.go Add --health-max-log-count, --health-max-log-size, --health-log-destination flags 2024-09-25 14:01:35 +02:00
specgenutil_test.go specgenutil: record the pod userns in the annotations 2024-07-24 12:10:48 +02:00
util.go cleanup: add new --stopped-only option 2024-08-27 15:01:23 +02:00
util_test.go Unit tests for pkg/specgenutil pkg/signal 2022-04-25 14:48:39 -05:00
volumes.go Validate the bind-propagation option to `--mount` 2024-10-04 09:07:51 -04:00
volumes_test.go Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00