podman/libpod
Giuseppe Scrivano c4dfd004ad
libpod: enforce noexec,nosuid,nodev for /dev/shm
these mount flags are already used for the /dev/shm mount on the host,
but they are not set for the bind mount itself.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-02-02 10:03:18 +01:00
..
common Set blob cache directory based on GraphDriver 2019-03-29 08:27:33 -04:00
define bump go module to version 4 2022-01-18 12:47:07 +01:00
driver bump go module to version 4 2022-01-18 12:47:07 +01:00
events bump go module to version 4 2022-01-18 12:47:07 +01:00
layers Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
linkmode Add podman static build 2020-05-11 13:11:07 +02:00
lock bump go module to version 4 2022-01-18 12:47:07 +01:00
logs bump go module to version 4 2022-01-18 12:47:07 +01:00
plugin bump go module to version 4 2022-01-18 12:47:07 +01:00
shutdown Fix CI flake on time of shutdown for API service 2021-10-12 09:53:19 -07:00
boltdb_state.go bump go module to version 4 2022-01-18 12:47:07 +01:00
boltdb_state_internal.go bump go module to version 4 2022-01-18 12:47:07 +01:00
boltdb_state_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
common_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_api.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_commit.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_config.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_copy_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_exec.go exec: retry rm -rf on ENOTEMPTY and EBUSY 2022-01-24 16:58:05 +01:00
container_graph.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_graph_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_inspect.go Run codespell on code 2022-01-21 09:52:12 -05:00
container_internal.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_internal_linux.go libpod: enforce noexec,nosuid,nodev for /dev/shm 2022-02-02 10:03:18 +01:00
container_internal_linux_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_internal_test.go Refactor container config 2020-07-23 10:18:14 -04:00
container_linux.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
container_log.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_log_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_log_unsupported.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_path_resolution.go volumes: be more tolerant and fix infinite loop 2021-10-28 16:37:33 +02:00
container_stat_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_top_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
container_validate.go bump go module to version 4 2022-01-18 12:47:07 +01:00
diff.go bump go module to version 4 2022-01-18 12:47:07 +01:00
events.go bump go module to version 4 2022-01-18 12:47:07 +01:00
healthcheck.go bump go module to version 4 2022-01-18 12:47:07 +01:00
healthcheck_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
info.go bump go module to version 4 2022-01-18 12:47:07 +01:00
kube.go bump go module to version 4 2022-01-18 12:47:07 +01:00
mounts_linux.go set root propagation based on volume properties 2018-11-26 13:55:02 +01:00
networking_linux.go libpod: report slirp4netns network stats 2022-02-01 16:23:58 +01:00
networking_linux_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
networking_machine.go use libnetwork from c/common 2022-01-12 17:07:30 +01:00
networking_slirp4netns.go bump go module to version 4 2022-01-18 12:47:07 +01:00
oci.go bump go module to version 4 2022-01-18 12:47:07 +01:00
oci_attach_linux.go libpod: fix connection leak 2022-01-24 16:05:42 +01:00
oci_conmon.go podman: add new cgroup mode split 2020-06-25 17:16:12 +02:00
oci_conmon_exec_linux.go libpod: fix leaking fd 2022-01-24 16:05:46 +01:00
oci_conmon_linux.go compat attach: fix write on closed channel 2022-01-18 16:32:38 +01:00
oci_missing.go bump go module to version 4 2022-01-18 12:47:07 +01:00
oci_util.go bump go module to version 4 2022-01-18 12:47:07 +01:00
options.go bump go module to version 4 2022-01-18 12:47:07 +01:00
pod.go bump go module to version 4 2022-01-18 12:47:07 +01:00
pod_api.go bump go module to version 4 2022-01-18 12:47:07 +01:00
pod_internal.go bump go module to version 4 2022-01-18 12:47:07 +01:00
pod_status.go bump go module to version 4 2022-01-18 12:47:07 +01:00
pod_top_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
reset.go bump go module to version 4 2022-01-18 12:47:07 +01:00
runtime.go bump go module to version 4 2022-01-18 12:47:07 +01:00
runtime_cstorage.go bump go module to version 4 2022-01-18 12:47:07 +01:00
runtime_ctr.go Merge pull request #12857 from giuseppe/fix-rm-dir-not-empty 2022-01-25 10:09:43 -05:00
runtime_img.go bump go module to version 4 2022-01-18 12:47:07 +01:00
runtime_migrate.go bump go module to version 4 2022-01-18 12:47:07 +01:00
runtime_pod.go bump go module to version 4 2022-01-18 12:47:07 +01:00
runtime_pod_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
runtime_renumber.go bump go module to version 4 2022-01-18 12:47:07 +01:00
runtime_volume.go bump go module to version 4 2022-01-18 12:47:07 +01:00
runtime_volume_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
state.go use libnetwork from c/common 2022-01-12 17:07:30 +01:00
state_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
stats.go bump go module to version 4 2022-01-18 12:47:07 +01:00
storage.go bump go module to version 4 2022-01-18 12:47:07 +01:00
util.go Show package version when running on alpine 2022-01-19 18:55:03 +01:00
util_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00
util_linux_test.go Fix mismatch between log messages and behavior of libpod.LabelVolumePath. 2020-09-13 23:24:15 -04:00
util_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
volume.go bump go module to version 4 2022-01-18 12:47:07 +01:00
volume_inspect.go bump go module to version 4 2022-01-18 12:47:07 +01:00
volume_internal.go bump go module to version 4 2022-01-18 12:47:07 +01:00
volume_internal_linux.go bump go module to version 4 2022-01-18 12:47:07 +01:00