containerd

0 Fork 0

mirror of https://github.com/containerd/containerd.git synced 2026-11-06 13:27:16 +00:00

Files

T

Paulo Oliveira ee4179e521 fix(oci): apply absolute symlink resolution to /etc/group

This is a follow-up to PR #12732.

As noted by @TheColorman, while the previous PR successfully resolved absolute symlinks pointing outside the mount root for /etc/passwd during user lookups, the same logic was missing for group lookups. This caused `openat etc/group: path escapes from parent` errors when /etc/group was also an absolute symlink (e.g., in NixOS environments).

This patch updates GIDFromFS, getSupplementalGroupsFromFS, and WithAppendAdditionalGroups to use the openUserFile helper, ensuring absolute symlinks are correctly re-anchored across all OCI user/group resolution paths. Includes unit test for validation.

Fixes #12683

Signed-off-by: Paulo Oliveira <paulo.hco47@gmail.com>

2026-03-12 08:38:15 +00:00

client.go

Move oci to pkg/oci

2024-01-17 09:55:48 -08:00

mounts_freebsd.go

pkg/oci: fix minor linting issues

2025-06-04 12:45:57 +02:00

mounts.go

pkg/oci: fix minor linting issues

2025-06-04 12:45:57 +02:00

spec_opts_linux_test.go

Clean up issues cited by usetesting package with golangci