Kir Kolyshkin 637f82d6b8 runc run: resolve tmpfs mount dest in container scope ...

In case a tmpfs mount path contains absolute symlinks, runc errors out
because those symlinks are resolved in the host (rather than container)
filesystem scope.

The fix is similar to that for bind mounts -- resolve the destination
in container rootfs scope using securejoin, and use the resolved path.

A simple integration test case is added to prevent future regressions.

Fixes https://github.com/opencontainers/runc/issues/2683.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>

2021-01-06 14:57:02 -08:00

..

integration

runc run: resolve tmpfs mount dest in container scope

2021-01-06 14:57:02 -08:00

rootless.sh

tests/int/cwd: add test case for cwd not owned by runc

2020-12-18 13:23:27 -08:00