Giuseppe Scrivano c4dfd004ad libpod: enforce noexec,nosuid,nodev for /dev/shm ...

these mount flags are already used for the /dev/shm mount on the host,
but they are not set for the bind mount itself.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2022-02-02 10:03:18 +01:00

..

common

Set blob cache directory based on GraphDriver

2019-03-29 08:27:33 -04:00

define

bump go module to version 4

2022-01-18 12:47:07 +01:00

driver

bump go module to version 4

2022-01-18 12:47:07 +01:00

events

bump go module to version 4

2022-01-18 12:47:07 +01:00

layers

Initial checkin from CRI-O repo

2017-11-01 11:24:59 -04:00

linkmode

Add podman static build

2020-05-11 13:11:07 +02:00

lock

bump go module to version 4

2022-01-18 12:47:07 +01:00

logs

bump go module to version 4

2022-01-18 12:47:07 +01:00

plugin

bump go module to version 4

2022-01-18 12:47:07 +01:00

shutdown

Fix CI flake on time of shutdown for API service

2021-10-12 09:53:19 -07:00

boltdb_state_internal.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

boltdb_state_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

boltdb_state.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

common_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_api.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_commit.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_config.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_copy_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_exec.go

exec: retry rm -rf on ENOTEMPTY and EBUSY

2022-01-24 16:58:05 +01:00

container_graph_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_graph.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_inspect.go

Run codespell on code

2022-01-21 09:52:12 -05:00

container_internal_linux_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_internal_linux.go

libpod: enforce noexec,nosuid,nodev for /dev/shm

2022-02-02 10:03:18 +01:00

container_internal_test.go

Refactor container config

2020-07-23 10:18:14 -04:00

container_internal.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_linux.go

Do not fetch pod and ctr State on retrieval in Bolt

2018-07-31 14:19:50 +00:00

container_log_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_log_unsupported.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_log.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_path_resolution.go

volumes: be more tolerant and fix infinite loop

2021-10-28 16:37:33 +02:00

container_stat_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_top_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container_validate.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

container.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

diff.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

events.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

healthcheck_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

healthcheck.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

info.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

kube.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

mounts_linux.go

set root propagation based on volume properties

2018-11-26 13:55:02 +01:00

networking_linux_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

networking_linux.go

libpod: report slirp4netns network stats

2022-02-01 16:23:58 +01:00

networking_machine.go

use libnetwork from c/common

2022-01-12 17:07:30 +01:00

networking_slirp4netns.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

oci_attach_linux.go

libpod: fix connection leak

2022-01-24 16:05:42 +01:00

oci_conmon_exec_linux.go

libpod: fix leaking fd

2022-01-24 16:05:46 +01:00

oci_conmon_linux.go

compat attach: fix write on closed channel

2022-01-18 16:32:38 +01:00

oci_conmon.go

podman: add new cgroup mode split

2020-06-25 17:16:12 +02:00

oci_missing.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

oci_util.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

oci.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

options.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod_api.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod_internal.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod_status.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod_top_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

pod.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

reset.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_cstorage.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_ctr.go

Merge pull request #12857 from giuseppe/fix-rm-dir-not-empty

2022-01-25 10:09:43 -05:00

runtime_img.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_migrate.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_pod_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_pod.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_renumber.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_volume_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime_volume.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

runtime.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

state_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

state.go

use libnetwork from c/common

2022-01-12 17:07:30 +01:00

stats.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

storage.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

util_linux_test.go

Fix mismatch between log messages and behavior of libpod.LabelVolumePath.

2020-09-13 23:24:15 -04:00

util_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

util_test.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

util.go

Show package version when running on alpine

2022-01-19 18:55:03 +01:00

volume_inspect.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

volume_internal_linux.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

volume_internal.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

volume.go

bump go module to version 4

2022-01-18 12:47:07 +01:00