github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
Files
b582da44384edbf6b8c3fbf635979ec554f5bd6b
containerd/pkg/server
History
Yohei Ueda b582da4438 Set masked and readonly paths based on default Unix spec 
The default values of masked and readonly paths are defined
in populateDefaultUnixSpec, and are used when a sandbox is
created.  It is not, however, used for new containers.  If
a container definition does not contain a security context
specifying masked/readonly paths, a container created from
it does not have masked and readonly paths.

This patch applies the default values to masked and
readonly paths of a new container, when any specific values
are not specified.

Fixes #1569

Signed-off-by: Yohei Ueda <yohei@jp.ibm.com>
2020-09-09 23:13:05 +09:00
..
bandwidth
Add copyright headers
2020-06-22 14:49:13 -04:00
io
use containerd/project header test
2020-04-22 19:35:37 -05:00
testing
use containerd/project header test
2020-04-22 19:35:37 -05:00
cni_conf_syncer.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_attach.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_create_test.go
Fix cgroups path for base OCI spec
2020-05-29 11:40:12 -07:00
container_create_unix_test.go
Set masked and readonly paths based on default Unix spec
2020-09-09 23:13:05 +09:00
container_create_unix.go
Set masked and readonly paths based on default Unix spec
2020-09-09 23:13:05 +09:00
container_create_windows_test.go
Support named pipe mounts for Windows containers
2020-06-25 12:01:08 -07:00
container_create_windows.go
Add GMSA Credential Spec passing
2020-06-10 11:15:07 -07:00
container_create.go
Handle KVM based runtimes with selinux
2020-08-26 21:38:03 -04:00
container_exec.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_execsync.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_list_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_list.go
adds support for pod id lookup for filter
2020-07-29 15:23:22 -05:00
container_log_reopen.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_remove_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_remove.go
Forcibly stop running containers before removal
2020-07-04 15:49:00 -05:00
container_start_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_start.go
Update server with nri injection points
2020-08-20 08:10:09 -04:00
container_stats_list_unix_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_stats_list_unix.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_stats_list_windows.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_stats_list.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_stats.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_status_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_status.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_stop_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_stop.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
container_update_resources_unix_test.go
allow disabling hugepages
2020-07-16 11:46:25 +09:00
container_update_resources_unix.go
allow disabling hugepages
2020-07-16 11:46:25 +09:00
container_update_resources_windows.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
events_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
events.go
Update server with nri injection points
2020-08-20 08:10:09 -04:00
helpers_selinux_test.go
Add MCS label support
2020-05-20 13:59:51 -05:00
helpers_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
helpers_unix_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
helpers_unix.go
Handle KVM based runtimes with selinux
2020-08-26 21:38:03 -04:00
helpers_windows.go
Handle KVM based runtimes with selinux
2020-08-26 21:38:03 -04:00
helpers.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
image_list_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
image_list.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
image_pull_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
image_pull.go
Allow GC to discard content after successful pull and unpack
2020-07-28 09:05:47 +09:00
image_remove.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
image_status_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
image_status.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
imagefs_info_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
imagefs_info.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
instrumented_service.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
opts.go
Update server with nri injection points
2020-08-20 08:10:09 -04:00
restart.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
sandbox_list_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
sandbox_list.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
sandbox_portforward_unix.go
Increase port-forward timeout to 1s to fix e2e test
2020-05-12 12:43:14 +02:00
sandbox_portforward_windows.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
sandbox_portforward.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
sandbox_remove.go
Forcibly stop running containers before removal
2020-07-04 15:49:00 -05:00
sandbox_run_test.go
Remove the protocol filter from the portMappings constructor.
2020-06-14 15:48:00 +00:00
sandbox_run_unix_test.go
Add MCS label support
2020-05-20 13:59:51 -05:00
sandbox_run_unix.go
Allow specify base OCI runtime spec
2020-05-28 13:39:31 -07:00
sandbox_run_windows_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
sandbox_run_windows.go
Allow specify base OCI runtime spec
2020-05-28 13:39:31 -07:00
sandbox_run.go
Handle KVM based runtimes with selinux
2020-08-26 21:38:03 -04:00
sandbox_status_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
sandbox_status.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
sandbox_stop_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
sandbox_stop.go
Forcibly stop running containers before removal
2020-07-04 15:49:00 -05:00
service_test.go
Allow specify base OCI runtime spec
2020-05-28 13:39:31 -07:00
service_unix.go
add selinux category range to config
2020-07-20 16:02:07 -04:00
service_windows.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
service.go
Make local copy of kubelet/cri/streaming
2020-06-22 13:54:34 -04:00
snapshots.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
status.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
streaming_test.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
streaming.go
Make local copy of kubelet/cri/streaming
2020-06-22 13:54:34 -04:00
update_runtime_config_test.go
bump cni dependencies
2020-08-21 18:00:20 +02:00
update_runtime_config.go
use containerd/project header test
2020-04-22 19:35:37 -05:00
version.go
use containerd/project header test
2020-04-22 19:35:37 -05:00