moby--moby/volume/local
Yong Tang c90ec05175 Restrict checkpoint name to prevent directory traversal
This fix tries to address the issue raised in 28769 where
checkpoint name was not checked before passing to containerd.
As a result, it was possible to use a special checkpoint name
to get outside of the container's directory.

This fix add restriction `[a-zA-Z0-9][a-zA-Z0-9_.-]+` (`RestrictedNamePattern`).
This is the same as container name restriction.

This fix fixes 28769.

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
2016-11-23 13:23:07 -08:00
..
local.go Restrict checkpoint name to prevent directory traversal 2016-11-23 13:23:07 -08:00
local_test.go #26639: Local NFS volumes do not resolve hostnames 2016-11-08 08:26:53 +00:00
local_unix.go #26639: Local NFS volumes do not resolve hostnames 2016-11-08 08:26:53 +00:00
local_windows.go Support mount opts for `local` volume driver 2016-03-03 10:32:25 -05:00