cli/components/engine/daemon at 37a49fd37145141553777280584388788733ebc6 - cli

docker/cli

mirror of https://github.com/docker/cli.git synced 2026-01-18 08:21:31 +03:00

Files

cyphar 9a8663f86a daemon: container: ensure cp cannot traverse outside container rootfs

This patch fixes the bug that allowed cp to copy files outside of
the containers rootfs, by passing a relative path (such as
../../../../../../../../etc/shadow). This is fixed by first converting
the path to an absolute path (relative to /) and then appending it
to the container's rootfs before continuing.

Docker-DCO-1.1-Signed-off-by: Aleksa Sarai <cyphar@cyphar.com> (github: cyphar)
Upstream-commit: bfc3a4192ae5723e401470688cdae59b95bd61f1
Component: engine

2014-05-14 11:14:59 +10:00

execdriver

Always mount a /run tmpfs in the container

2014-05-12 21:41:04 +02:00

graphdriver

devmapper: Remove accidental debug spew

2014-05-08 19:25:47 +02:00

networkdriver

add resolvconf

2014-05-05 22:55:32 +00:00

attach.go

Move Attach from container to daemon