dilim/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2026-07-12 02:24:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
41521417ab4e16f2a34ca010bdb68a2a732cb80c
systemd/src/nspawn
History
Lennart Poettering 07bca16fc8 nspawn: make sure to chown() implicit source dirs for --bind= to container root UID 
This makes sure that a switch like --bind=:/foo does the right thing if
user namespacing is one: the backing dir should be owned by the
container's root UID not the host's. Thus, whenever the source path is
left empty and we automatically generate a source dir as temporary
directory, ensure it's owned by the right UID.

Fixes: #20869
2021-10-29 09:16:34 +02:00
..
fuzz-nspawn-oci.c
fuzzers: move several fuzzers
2021-01-19 07:04:19 +09:00
fuzz-nspawn-oci.options
fuzzers: move several fuzzers
2021-01-19 07:04:19 +09:00
fuzz-nspawn-settings.c
fuzzers: move several fuzzers
2021-01-19 07:04:19 +09:00
fuzz-nspawn-settings.options
fuzzers: move several fuzzers
2021-01-19 07:04:19 +09:00
meson.build
nspawn: add new --bind-user= option for binding a host user into the container
2021-05-19 17:46:59 +02:00
nspawn-bind-user.c
basic: move chase_symlinks_and_fopen_unlocked() → chase-symlinks.[ch]
2021-10-05 19:37:30 +01:00
nspawn-bind-user.h
nspawn: add new --bind-user= option for binding a host user into the container
2021-05-19 17:46:59 +02:00
nspawn-cgroup.c
cgroup-util: use string_hash_ops_free
2021-09-11 20:29:34 +09:00
nspawn-cgroup.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-creds.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-creds.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-def.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-expose-ports.c
tree-wide: use AF_NETLINK instead of PF_NETLINK
2021-10-18 22:46:37 +02:00
nspawn-expose-ports.h
nspawn: expose container ipv6 address too
2021-01-19 16:22:58 +01:00
nspawn-gperf.gperf
nspawn: add --suppress-sync=yes mode for turning sync() and friends into NOPs via seccomp
2021-10-20 11:35:15 +02:00
nspawn-mount.c
nspawn: make sure to chown() implicit source dirs for --bind= to container root UID
2021-10-29 09:16:34 +02:00
nspawn-mount.h
nspawn: add filesystem id mapping support to --bind and --bind-ro
2021-10-28 19:19:22 +02:00
nspawn-network.c
nspawn: path_is_read_only_fs() may return negative errno
2021-06-12 03:19:08 +09:00
nspawn-network.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-oci.c
Typos found by codespell
2021-10-20 22:20:18 +09:00
nspawn-oci.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-patch-uid.c
tree-wide: port things over to FORMAT_PROC_FD_PATH()
2021-08-19 09:19:27 +02:00
nspawn-patch-uid.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-register.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-register.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-seccomp.c
nspawn: remove outdated comment regarding bpffs
2020-12-14 10:50:42 +01:00
nspawn-seccomp.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-settings.c
alloc-util: add strdupa_safe() + strndupa_safe() and use it everywhere
2021-10-14 15:57:52 +02:00
nspawn-settings.h
nspawn: add --suppress-sync=yes mode for turning sync() and friends into NOPs via seccomp
2021-10-20 11:35:15 +02:00
nspawn-setuid.c
alloc-util: simplify GREEDY_REALLOC() logic by relying on malloc_usable_size()
2021-05-19 16:42:37 +02:00
nspawn-setuid.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn-stub-pid1.c
Drop the text argument from assert_not_reached()
2021-08-03 10:05:10 +02:00
nspawn-stub-pid1.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
nspawn.c
nspawn: add filesystem id mapping support to --bind and --bind-ro
2021-10-28 19:19:22 +02:00
nspawn.h
nspawn: export userns_mkdir() + userns_lchown() so that it can be used elsewhere in nspawn
2021-05-19 17:33:25 +02:00
test-nspawn-tables.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
test-patch-uid.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00