Files
3519233e1b Fix CVE-2020-15257
This is the 1.2 backport. It's the Samuel Karp patch with additional changes:

 - Add ReadAddress function from commit 84a24711e8
 - Add "horten the unix socket path for shim" commit (a631796fda)

Below is the original commit message:

-----------------------------------------------------------------------

Use path based unix socket for shims

This allows filesystem based ACLs for configuring access to the socket of a
shim.

Co-authored-by: Samuel Karp <skarp@amazon.com>
Signed-off-by: Samuel Karp <skarp@amazon.com>
Signed-off-by: Michael Crosby <michael@thepasture.io>
Signed-off-by: Michael Crosby <michael.crosby@apple.com>

-----------------------------------------------------------------------

containerd-shim: use path-based unix socket

This allows filesystem-based ACLs for configuring access to the socket
of a shim.

Ported from Michael Crosby's similar patch for v2 shims.

Signed-off-by: Samuel Karp <skarp@amazon.com>

-----------------------------------------------------------------------

Co-authored-by: Paulo Flabiano Smorigo <pfsmorigo@canonical.com>
Co-authored-by: varsha teratipally <teratipally@google.com>
Signed-off-by: Tianon Gravi <tianon@infosiftr.com>
2020-11-24 22:00:01 -08:00
..
2018-07-17 10:21:29 -04:00
2018-07-30 10:21:04 -04:00
2020-11-24 22:00:01 -08:00
2020-11-24 22:00:01 -08:00
2018-02-19 10:32:26 +09:00
2018-02-19 10:32:26 +09:00
2018-07-17 10:21:29 -04:00
2018-07-17 10:21:29 -04:00
2018-02-19 10:32:26 +09:00