kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity

Merge pull request #19135 from Microsoft/jjh/securitywarning

Browse source 
Windows: Fix security warning regression
This commit is contained in:
Alexander Morozov 2016-01-08 13:55:41 -08:00
commit 807d575b5e
2 changed files with 23 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
api/client/build.go
View file

@ -269,8 +269,9 @@ func (cli *DockerCli) CmdBuild(args ...string) error {
}
}
// Windows: show error message about modified file permissions.
if response.OSType == "windows" {
// Windows: show error message about modified file permissions if the
// daemon isn't running Windows.
if response.OSType != "windows" && runtime.GOOS == "windows" {
fmt.Fprintln(cli.err, `SECURITY WARNING: You are building a Docker image from Windows against a non-Windows Docker host. All files and directories added to build context will have '-rwxr-xr-x' permissions. It is recommended to double check and reset permissions for sensitive files and directories.`)
}

22
integration-cli/docker_cli_build_test.go
View file

@ -4920,8 +4920,26 @@ func (s *DockerSuite) TestBuildNotVerboseSuccess(c *check.C) {
if outRegexp.Find([]byte(stdout)) == nil {
c.Fatalf("Test %s expected stdout to match the [%v] regexp, but it is [%v]", te.Name, outRegexp, stdout)
}
if stderr != "" {
c.Fatalf("Test %s expected stderr to be empty, but it is [%#v]", te.Name, stderr)
if runtime.GOOS == "windows" {
// stderr contains a security warning on Windows if the daemon isn't Windows
lines := strings.Split(stderr, "\n")
warningCount := 0
for _, v := range lines {
warningText := "SECURITY WARNING: You are building a Docker image from Windows against a non-Windows Docker host."
if strings.Contains(v, warningText) {
warningCount++
}
if v != "" && !strings.Contains(v, warningText) {
c.Fatalf("Stderr contains unexpected output line: %q", v)
}
}
if warningCount != 1 && daemonPlatform != "windows" {
c.Fatalf("Test %s didn't get security warning running from Windows to non-Windows", te.Name)
}
} else {
if stderr != "" {
c.Fatalf("Test %s expected stderr to be empty, but it is [%#v]", te.Name, stderr)
}
}
}