gvisor/runsc/boot
Fabricio Voznika 42e212f6b7 Preserve permissions when checking lower
The code was wrongly assuming that only read access was
required from the lower overlay when checking for permissions.
This allowed non-writable files to be writable in the overlay.

Fixes #316

PiperOrigin-RevId: 255263686
2019-06-26 14:24:44 -07:00
..
filter Update canonical repository. 2019-06-13 16:50:15 -07:00
BUILD Update canonical repository. 2019-06-13 16:50:15 -07:00
compat.go Update canonical repository. 2019-06-13 16:50:15 -07:00
compat_amd64.go Update canonical repository. 2019-06-13 16:50:15 -07:00
compat_test.go Update canonical repository. 2019-06-13 16:50:15 -07:00
config.go Update canonical repository. 2019-06-13 16:50:15 -07:00
controller.go Allow to change logging options using 'runsc debug' 2019-06-24 15:03:02 -07:00
debug.go Update canonical repository. 2019-06-13 16:50:15 -07:00
events.go Update canonical repository. 2019-06-13 16:50:15 -07:00
fds.go Update canonical repository. 2019-06-13 16:50:15 -07:00
fs.go Preserve permissions when checking lower 2019-06-26 14:24:44 -07:00
fs_test.go Add support to mount pod shared tmpfs mounts 2019-06-11 14:54:31 -07:00
limits.go Update canonical repository. 2019-06-13 16:50:15 -07:00
loader.go Enable Receive Buffer Auto-Tuning for runsc. 2019-06-14 07:31:45 -07:00
loader_test.go fsgopher: reopen files via /proc/self/fd 2019-06-24 21:44:27 -07:00
network.go Update canonical repository. 2019-06-13 16:50:15 -07:00
pprof.go gvisor/runsc: apply seccomp filters before parsing a state file 2019-06-12 11:55:24 -07:00
strace.go Update canonical repository. 2019-06-13 16:50:15 -07:00
user.go Update canonical repository. 2019-06-13 16:50:15 -07:00
user_test.go Update canonical repository. 2019-06-13 16:50:15 -07:00