3 Commits

Author	SHA1	Message	Date
Aleksa Sarai	cfb74326be	pathrs: add "hallucination" helpers for SecureJoin magic ... In order to maintain compatibility with previous releases of runc (which permitted dangling symlinks as path components by permitting non-existent path components to be treated like real directories) we have to first do SecureJoin to construct a target path that is compatible with the old behaviour but has all dangling symlinks (or other invalid paths like ".." components after non-existent directories) removed. This is effectively a more generic verison of commit 3f925525b4 ("rootfs: re-allow dangling symlinks in mount targets") and will let us remove the need for open-coding SecureJoin workarounds. Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>	2025-11-26 21:04:05 +11:00
Aleksa Sarai	42a1e19d67	libcontainer: move CleanPath and StripRoot to internal/pathrs ... These helpers will be needed for the compatibility code added in future patches in this series, but because "internal/pathrs" is imported by "libcontainer/utils" we need to move them so that we can avoid circular dependencies. Because the old functions were in a non-internal package it is possible some downstreams use them, so add some wrappers but mark them as deprecated. Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>	2025-11-26 21:03:29 +11:00
Aleksa Sarai	6fc1914491	internal: move utils.MkdirAllInRoot to internal/pathrs ... We will have more wrappers around filepath-securejoin, and so move them to their own specific package so that we can eventually use libpathrs fairly cleanly (by swapping out the implementation). Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>	2025-11-01 21:24:02 +11:00