1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/daemon
cyphar bfc3a4192a daemon: container: ensure cp cannot traverse outside container rootfs
This patch fixes the bug that allowed cp to copy files outside of
the containers rootfs, by passing a relative path (such as
../../../../../../../../etc/shadow). This is fixed by first converting
the path to an absolute path (relative to /) and then appending it
to the container's rootfs before continuing.

Docker-DCO-1.1-Signed-off-by: Aleksa Sarai <cyphar@cyphar.com> (github: cyphar)
2014-05-14 11:14:59 +10:00
..
execdriver Always mount a /run tmpfs in the container 2014-05-12 21:41:04 +02:00
graphdriver devmapper: Remove accidental debug spew 2014-05-08 19:25:47 +02:00
networkdriver add resolvconf 2014-05-05 22:55:32 +00:00
attach.go Move Attach from container to daemon 2014-05-05 16:48:56 -07:00
container.go daemon: container: ensure cp cannot traverse outside container rootfs 2014-05-14 11:14:59 +10:00
container_unit_test.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
daemon.go move RegisterLinks to daemon 2014-05-13 00:54:46 +00:00
daemon_aufs.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
daemon_btrfs.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
daemon_devicemapper.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
daemon_no_aufs.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
history.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
network_settings.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
server.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
state.go container: Remove Ghost state 2014-04-22 09:49:53 +02:00
utils.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
utils_test.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
volumes.go Update code to handle new path to Follow Symlink func 2014-05-13 10:54:08 -07:00