Commit Graph

  • ee56b8571c openat2: improve resilience on busy systems Aleksa Sarai 2025-11-01 17:21:36 +11:00
  • 4edba17619 rootfs: re-allow dangling symlinks in mount targets Aleksa Sarai 2025-11-05 02:04:02 +11:00
  • aca52c4690 openat2: improve resilience on busy systems Aleksa Sarai 2025-11-01 17:21:36 +11:00
  • f724d6164d rootfs: re-allow dangling symlinks in mount targets Aleksa Sarai 2025-11-05 02:04:02 +11:00
  • 753884a0ff openat2: improve resilience on busy systems Aleksa Sarai 2025-11-01 17:21:36 +11:00
  • d2c174c67f selinux: use safe procfs API for labels Aleksa Sarai 2025-10-07 22:48:50 +11:00
  • 5debde388e rootfs: switch to fd-based handling of mountpoint targets Aleksa Sarai 2025-05-10 23:46:55 +00:00
  • 34e0b13f3f libct: align param type for mountCgroupV1/V2 functions lifubang 2025-05-08 15:13:04 +00:00
  • 76aa4616f5 libct/system: use securejoin for /proc/$pid/stat Aleksa Sarai 2025-07-19 16:30:26 +10:00
  • 283adf7371 init: use securejoin for /proc/self/setgroups Aleksa Sarai 2025-07-18 15:33:56 +10:00
  • db63540241 init: write sysctls using safe procfs API Aleksa Sarai 2025-07-17 11:31:50 +10:00
  • 30d045fef3 utils: remove unneeded EnsureProcHandle Aleksa Sarai 2025-06-20 16:23:38 +10:00
  • 38c6daaeee utils: use safe procfs for /proc/self/fd loop code Aleksa Sarai 2025-06-20 15:43:49 +10:00
  • 43001471df apparmor: use safe procfs API for labels Aleksa Sarai 2025-06-20 15:41:51 +10:00
  • 29e1e181d1 ci: add lint to forbid the usage of os.Create Aleksa Sarai 2025-05-15 17:40:25 +10:00
  • fb875cb9bc rootfs: avoid using os.Create for new device inodes Aleksa Sarai 2025-05-15 21:38:32 +10:00
  • aa466450ae internal: add wrappers for securejoin.Proc* Aleksa Sarai 2025-07-18 13:24:31 +10:00
  • 856848696e go.mod: update to github.com/cyphar/filepath-securejoin@v0.5.0 Aleksa Sarai 2025-05-06 11:23:40 +10:00
  • 4371d08af8 console: verify /dev/pts/ptmx before use Aleksa Sarai 2025-05-15 23:56:45 +10:00
  • 3b2c56b533 console: avoid trivial symlink attacks for /dev/console Aleksa Sarai 2025-05-15 17:32:01 +10:00
  • fe3794db4a console: add fallback for pre-TIOCGPTPEER kernels Aleksa Sarai 2025-08-01 19:33:12 +10:00
  • 967c632b37 console: use TIOCGPTPEER when allocating peer PTY Aleksa Sarai 2025-05-15 16:12:21 +10:00
  • d1affbb8d3 libct: maskPaths: don't rely on ENOTDIR for mount Kir Kolyshkin 2025-04-22 18:02:13 -07:00
  • 32bce3d31a libct: maskPaths: only ignore ENOENT on mount dest Kir Kolyshkin 2025-04-21 15:33:52 -07:00
  • ecf3b2d7ab libct: add/use isDevNull, verifyDevNull Kir Kolyshkin 2025-03-06 08:19:45 -08:00
  • 07fb281f0c *: switch to safer securejoin.Reopen Aleksa Sarai 2025-06-19 10:19:41 +10:00
  • adf26e11fb internal: move utils.MkdirAllInRoot to internal/pathrs Aleksa Sarai 2025-07-18 13:18:53 +10:00
  • 67a0ae39f1 internal/sys: add VerifyInode helper Aleksa Sarai 2025-07-22 16:23:28 +10:00
  • 1d5298a3d9 internal: linux: add package doc-comment Aleksa Sarai 2025-09-30 23:04:02 +10:00
  • 3f925525b4 rootfs: re-allow dangling symlinks in mount targets Aleksa Sarai 2025-11-05 02:04:02 +11:00
  • a41366e740 openat2: improve resilience on busy systems Aleksa Sarai 2025-11-01 17:21:36 +11:00
  • ed6b1693b8 selinux: use safe procfs API for labels Aleksa Sarai 2025-10-07 22:48:50 +11:00
  • d40b3439a9 rootfs: switch to fd-based handling of mountpoint targets Aleksa Sarai 2025-05-10 23:46:55 +00:00
  • 4b37cd93f8 libct: align param type for mountCgroupV1/V2 functions lifubang 2025-05-08 15:13:04 +00:00
  • d61fd29d85 libct/system: use securejoin for /proc/$pid/stat Aleksa Sarai 2025-07-19 16:30:26 +10:00
  • 435cc81be6 init: use securejoin for /proc/self/setgroups Aleksa Sarai 2025-07-18 15:33:56 +10:00
  • 77d217c7c3 init: write sysctls using safe procfs API Aleksa Sarai 2025-07-17 11:31:50 +10:00
  • b3dd1bc562 utils: remove unneeded EnsureProcHandle Aleksa Sarai 2025-06-20 16:23:38 +10:00
  • ff6fe13246 utils: use safe procfs for /proc/self/fd loop code Aleksa Sarai 2025-06-20 15:43:49 +10:00
  • fdcc9d3cad apparmor: use safe procfs API for labels Aleksa Sarai 2025-06-20 15:41:51 +10:00
  • aee7d3fe35 ci: add lint to forbid the usage of os.Create Aleksa Sarai 2025-05-15 17:40:25 +10:00
  • 01de9d65dc rootfs: avoid using os.Create for new device inodes Aleksa Sarai 2025-05-15 21:38:32 +10:00
  • 77889b56db internal: add wrappers for securejoin.Proc* Aleksa Sarai 2025-07-18 13:24:31 +10:00
  • 44a0fcf685 go.mod: update to github.com/cyphar/filepath-securejoin@v0.5.0 Aleksa Sarai 2025-05-06 11:23:40 +10:00
  • de87203e62 console: verify /dev/pts/ptmx before use Aleksa Sarai 2025-05-15 23:56:45 +10:00
  • 9be1dbf4ac console: avoid trivial symlink attacks for /dev/console Aleksa Sarai 2025-05-15 17:32:01 +10:00
  • 398955bccb console: add fallback for pre-TIOCGPTPEER kernels Aleksa Sarai 2025-08-01 19:33:12 +10:00
  • 531ef794e4 console: use TIOCGPTPEER when allocating peer PTY Aleksa Sarai 2025-05-15 16:12:21 +10:00
  • 5d7b242407 libct: maskPaths: don't rely on ENOTDIR for mount Kir Kolyshkin 2025-04-22 18:02:13 -07:00
  • 1a30a8f3d9 libct: maskPaths: only ignore ENOENT on mount dest Kir Kolyshkin 2025-04-21 15:33:52 -07:00
  • 8476df83b5 libct: add/use isDevNull, verifyDevNull Kir Kolyshkin 2025-03-06 08:19:45 -08:00
  • ff94f9991b *: switch to safer securejoin.Reopen Aleksa Sarai 2025-06-19 10:19:41 +10:00
  • 6fc1914491 internal: move utils.MkdirAllInRoot to internal/pathrs Aleksa Sarai 2025-07-18 13:18:53 +10:00
  • db19bbed53 internal/sys: add VerifyInode helper Aleksa Sarai 2025-07-22 16:23:28 +10:00
  • 1cdfc0def9 Deprecate cgroup v1 Akihiro Suda 2025-11-01 00:17:49 +09:00
  • fb01482d12 Merge pull request #4951 from kolyshkin/better-nsenter-errors Kir Kolyshkin 2025-10-29 09:54:49 -07:00
  • 6c18b25cdc libct/nsenter: better read/write errors Kir Kolyshkin 2025-10-11 19:07:25 -07:00
  • aea52d0ab0 libct/nsenter: sprinkle missing sane_kill Kir Kolyshkin 2025-10-26 15:58:44 -07:00
  • 067b8335e7 libct/nsenter: add and use bailx Kir Kolyshkin 2025-10-11 17:40:48 -07:00
  • 9c8f476cb6 libct/nsenter: save errno in sane_kill Kir Kolyshkin 2025-10-11 17:36:54 -07:00
  • 52a9dd563d Merge pull request #4953 from opencontainers/dependabot/github_actions/actions/upload-artifact-5 lfbzhm 2025-10-28 08:13:33 +08:00
  • f5f6056219 build(deps): bump actions/upload-artifact from 4 to 5 dependabot[bot] 2025-10-27 04:09:57 +00:00
  • 644bb1e59d Merge pull request #4950 from ariel-anieli/loop-range-integers Akihiro Suda 2025-10-26 04:20:57 +09:00
  • 34da991298 libcontainer/seccomp: Use for range over integers Ariel Otilibili 2025-10-23 10:53:54 +02:00
  • 3a56046197 Merge pull request #4945 from kolyshkin/int-cleanup-part1 lfbzhm 2025-10-22 23:40:54 +08:00
  • 7f32e50085 Merge pull request #4938 from zhaixiaojuan/main Akihiro Suda 2025-10-22 12:51:28 +09:00
  • 3bd4808b41 Merge pull request #4947 from kolyshkin/1.4-4944 lfbzhm 2025-10-21 20:34:17 +08:00
  • d12d6010de Merge branch 'main' into main zhaixiaojuan 2025-10-21 10:10:33 +08:00
  • 885509afdf Add loong64 support in seccomp and PIE zhaixiaojuan 2025-10-16 09:50:37 +08:00
  • 1018d8dc4d ci: show criu version in criu-dev testing Kir Kolyshkin 2025-10-16 12:09:46 -07:00
  • f6e408f744 ci: bump bats to 1.11.1 Kir Kolyshkin 2025-10-16 12:02:01 -07:00
  • a7651e0ee0 merge #4944 into opencontainers/runc:main Aleksa Sarai 2025-10-20 19:29:58 +11:00
  • 3c2683f52f tests/int/cgroups: use heredoc to break a long line Kir Kolyshkin 2025-10-18 13:04:06 -07:00
  • b82ae3afdc tests/int/delete: fix pause test for rootless case Kir Kolyshkin 2025-10-18 12:52:17 -07:00
  • ad72eab6c7 tests/int/checkpoint: fix using run twice Kir Kolyshkin 2025-10-17 16:24:11 -07:00
  • 92f3d1b225 tests/int/cgroups.bats: fix a wrong comment Kir Kolyshkin 2025-10-17 15:41:32 -07:00
  • b3a9f423b9 tests/int: remove bogus $status checks Kir Kolyshkin 2025-10-16 16:31:01 -07:00
  • 693a471af8 tests/int: use run with a status check Kir Kolyshkin 2025-10-16 16:28:51 -07:00
  • 773a44cc1d tests/int/netdev: slight refactoring Kir Kolyshkin 2025-10-18 13:22:13 -07:00
  • 0eb03ef86f tests/int: remove useless/obvious comments Kir Kolyshkin 2025-10-16 14:06:22 -07:00
  • 772e91062d tests/int/README: update Kir Kolyshkin 2025-10-17 12:39:36 -07:00
  • 2a7ce15e68 ci: show criu version in criu-dev testing Kir Kolyshkin 2025-10-16 12:09:46 -07:00
  • 6af1d637ba ci: bump bats to 1.11.1 Kir Kolyshkin 2025-10-16 12:02:01 -07:00
  • 13a5c4edf4 Merge pull request #4941 from lifubang/backport-4934-4917-4937 Kir Kolyshkin 2025-10-16 10:25:45 -07:00
  • 8b7e3d7fe2 merge #4931 into opencontainers/runc:release-1.3 Aleksa Sarai 2025-10-16 18:24:00 +11:00
  • ae19971927 ci: only run lint-extra job on PRs to main Kir Kolyshkin 2025-10-14 16:15:13 -07:00
  • 8bb53e4241 ci: bump golangci-lint to v2.5 Kir Kolyshkin 2025-10-07 16:59:48 -07:00
  • 52ee0fed30 all: format sources with gofumpt v0.9.1 Kir Kolyshkin 2025-10-07 17:07:50 -07:00
  • 61070cc0b5 CI: remove deprecated lima-vm/lima-actions/ssh Akihiro Suda 2025-10-14 14:41:27 +09:00
  • 2e82e55edb tests: bfq: skip tests on misbehaving udev systems Aleksa Sarai 2025-07-31 13:26:41 +10:00
  • f1627a7ab7 tests: clean up loopback devices properly Aleksa Sarai 2025-07-31 10:23:59 +10:00
  • 178e03c7f3 tests/int/update: fix getting block major Kir Kolyshkin 2025-07-14 17:05:20 -07:00
  • f14cad5a43 runc update: handle duplicated devs properly Kir Kolyshkin 2025-06-12 13:52:17 -07:00
  • 80da60e12d runc update: support per-device weight and iops Kir Kolyshkin 2025-05-30 15:08:21 -07:00
  • 7cb4b1878f Merge pull request #4942 from lifubang/backport-1.3-4934-4917-4937 Kir Kolyshkin 2025-10-15 23:16:29 -07:00
  • 2462b68fa2 Merge pull request #4943 from lifubang/backport-1.2-4934-4937 Kir Kolyshkin 2025-10-15 23:15:32 -07:00
  • 99e41a58f7 ci: only run lint-extra job on PRs to main Kir Kolyshkin 2025-10-14 16:15:13 -07:00
  • f2a1c98662 CI: remove deprecated lima-vm/lima-actions/ssh Akihiro Suda 2025-10-14 14:41:27 +09:00
  • 1c78b1ff02 ci: only run lint-extra job on PRs to main Kir Kolyshkin 2025-10-14 16:15:13 -07:00
  • 1e425cc71e ci: bump golangci-lint to v2.5 Kir Kolyshkin 2025-10-07 16:59:48 -07:00