k8s-merge-robot 7ee4189cf6 Merge pull request #27036 from sttts/sttts-secure-seccomp-path ...

Automatic merge from submit-queue

Filter seccomp profile path from malicious .. and /

Without this patch with `localhost/<some-releative-path>` as seccomp profile one can load any file on the host, e.g. `localhost/../../../../dev/mem` which is not healthy for the kubelet.

/cc @jfrazelle 

Unit tests depend on https://github.com/kubernetes/kubernetes/pull/26710.

2016-06-18 15:58:07 -07:00

..

testdata/v1

Use fake images for pkg/api/validation unit tests

2016-04-14 17:13:15 -07:00

doc.go

Make copyright ownership statement generic

2015-05-01 17:49:56 -04:00

events_test.go

rewrite go imports

2015-08-05 17:30:03 -07:00

events.go

Make IsDNS1123Subdomain return error strings

2016-05-19 08:57:49 -07:00

name_test.go

Make name validators return string slices

2016-05-18 00:48:01 -07:00

name.go

Make name validators return string slices

2016-05-18 00:48:01 -07:00

schema_test.go

Kubectl support for validating nested objects with different ApiGroups (e.g. Lists containing objects in different api groups). Closes #24089

2016-05-09 19:38:40 -07:00

schema.go

Kubectl support for validating nested objects with different ApiGroups (e.g. Lists containing objects in different api groups). Closes #24089

2016-05-09 19:38:40 -07:00

validation_test.go

Move seccomp annotation validation into api/validation

2016-06-14 14:58:32 +02:00

validation.go

Merge pull request #27036 from sttts/sttts-secure-seccomp-path

2016-06-18 15:58:07 -07:00