Giuseppe Scrivano c4dfd004ad libpod: enforce noexec,nosuid,nodev for /dev/shm ...

these mount flags are already used for the /dev/shm mount on the host,
but they are not set for the bind mount itself.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2022-02-02 10:03:18 +01:00

..

common

…

define

bump go module to version 4

2022-01-18 12:47:07 +01:00

driver

bump go module to version 4

2022-01-18 12:47:07 +01:00

events

bump go module to version 4

2022-01-18 12:47:07 +01:00

layers

…

linkmode

…

lock

bump go module to version 4

2022-01-18 12:47:07 +01:00

logs

bump go module to version 4

2022-01-18 12:47:07 +01:00

plugin

bump go module to version 4

2022-01-18 12:47:07 +01:00

shutdown

Fix CI flake on time of shutdown for API service

2021-10-12 09:53:19 -07:00

boltdb_state_internal.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

boltdb_state_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

boltdb_state.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

common_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_api.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_commit.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_config.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_copy_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_exec.go

exec: retry rm -rf on ENOTEMPTY and EBUSY

2022-01-24 16:58:05 +01:00

container_graph_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_graph.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_inspect.go

Run codespell on code

2022-01-21 09:52:12 -05:00

container_internal_linux_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_internal_linux.go

libpod: enforce noexec,nosuid,nodev for /dev/shm

2022-02-02 10:03:18 +01:00

container_internal_test.go

…

container_internal.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_linux.go

…

container_log_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_log_unsupported.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_log.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_path_resolution.go

volumes: be more tolerant and fix infinite loop

2021-10-28 16:37:33 +02:00

container_stat_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_top_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_validate.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

diff.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

events.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

healthcheck_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

healthcheck.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

info.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

kube.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

mounts_linux.go

…

networking_linux_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

networking_linux.go

libpod: report slirp4netns network stats

2022-02-01 16:23:58 +01:00

networking_machine.go

use libnetwork from c/common

2022-01-12 17:07:30 +01:00

networking_slirp4netns.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

oci_attach_linux.go

libpod: fix connection leak

2022-01-24 16:05:42 +01:00

oci_conmon_exec_linux.go

libpod: fix leaking fd

2022-01-24 16:05:46 +01:00

oci_conmon_linux.go

compat attach: fix write on closed channel

2022-01-18 16:32:38 +01:00

oci_conmon.go

…

oci_missing.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

oci_util.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

oci.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

options.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod_api.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod_internal.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod_status.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod_top_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

reset.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_cstorage.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_ctr.go

Merge pull request #12857 from giuseppe/fix-rm-dir-not-empty

2022-01-25 10:09:43 -05:00

runtime_img.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_migrate.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_pod_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_pod.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_renumber.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_volume_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_volume.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

state_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

state.go

use libnetwork from c/common

2022-01-12 17:07:30 +01:00

stats.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

storage.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

util_linux_test.go

…

util_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

util_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

util.go

Show package version when running on alpine

2022-01-19 18:55:03 +01:00

volume_inspect.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

volume_internal_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

volume_internal.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

volume.go

bump go module to version 4

2022-01-18 12:47:07 +01:00