go
/
gvisor
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
gvisor/runsc/test/integration
History
Fabricio Voznika e4d3ca7263 Prevent internal tmpfs mount to override files in /tmp 
Runsc wants to mount /tmp using internal tmpfs implementation for
performance. However, it risks hiding files that may exist under
/tmp in case it's present in the container. Now, it only mounts
over /tmp iff:
  - /tmp was not explicitly asked to be mounted
  - /tmp is empty

If any of this is not true, then /tmp maps to the container's
image /tmp.

Note: checkpoint doesn't have sentry FS mounted to check if /tmp
is empty. It simply looks for explicit mounts right now.
PiperOrigin-RevId: 229607856
Change-Id: I10b6dae7ac157ef578efc4dfceb089f3b94cde06
 		2019-01-16 12:48:32 -08:00
..
BUILD Track paths and provide a rename hook. 2018-10-23 00:20:15 -07:00
exec_test.go Use correct company name in copyright header 2018-10-19 16:35:11 -07:00
integration.go Use correct company name in copyright header 2018-10-19 16:35:11 -07:00
integration_test.go Prevent internal tmpfs mount to override files in /tmp 2019-01-16 12:48:32 -08:00