3 Commits

Author	SHA1	Message	Date
baude	6246942d37	Increase security and performance when looking up groups ... We implement the securejoin method to make sure the paths to /etc/passwd and /etc/group are not symlinks to something naughty or outside the container image. And then instead of actually chrooting, we use the runc functions to get information about a user. The net result is increased security and a a performance gain from 41ms to 100us. Signed-off-by: baude <bbaude@redhat.com>	2018-10-25 06:42:43 -05:00
umohnani8	27107fdac1	Vendor in latest containers/image and contaners/storage ... Made necessary changes to functions to include contex.Context wherever needed Signed-off-by: umohnani8 <umohnani@redhat.com> Closes: #640 Approved by: baude	2018-04-19 14:08:47 +00:00
baude	be9ed1cfac	Privileged containers should inherit host devices ... When running a privileged container, it should inherit the same devices the host has. Signed-off-by: baude <bbaude@redhat.com> Closes: #330 Approved by: mheon	2018-02-15 00:20:47 +00:00