Aleksa Sarai d0ff22b574 pathrs: add "hallucination" helpers for SecureJoin magic ...

In order to maintain compatibility with previous releases of runc (which
permitted dangling symlinks as path components by permitting
non-existent path components to be treated like real directories) we
have to first do SecureJoin to construct a target path that is
compatible with the old behaviour but has all dangling symlinks (or
other invalid paths like ".." components after non-existent directories)
removed.

This is effectively a more generic verison of commit 3f925525b4
("rootfs: re-allow dangling symlinks in mount targets") and will let us
remove the need for open-coding SecureJoin workarounds.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
(cherry picked from commit cfb74326be)
Signed-off-by: Aleksa Sarai <aleksa@amutable.com>

2026-06-12 23:52:01 +02:00

..

doc.go

internal: move utils.MkdirAllInRoot to internal/pathrs

2025-10-16 11:29:30 +11:00

mkdirall_pathrslite.go

pathrs: add "hallucination" helpers for SecureJoin magic

2026-06-12 23:52:01 +02:00

path_test.go

libcontainer: move CleanPath and StripRoot to internal/pathrs

2026-06-12 23:50:56 +02:00

path.go

pathrs: add "hallucination" helpers for SecureJoin magic

2026-06-12 23:52:01 +02:00

procfs_pathrslite.go

openat2: improve resilience on busy systems

2025-11-05 19:54:30 +11:00

retry.go

openat2: improve resilience on busy systems

2025-11-05 19:54:30 +11:00

root_pathrslite.go

pathrs: add "hallucination" helpers for SecureJoin magic

2026-06-12 23:52:01 +02:00