packages/runc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
86 Commits 1 Branch 0 Tags
Commit Graph

27 Commits

Author SHA1 Message Date
zhongjiawei
8feee0899f runc:fix init error return logic 2023-09-18 15:43:50 +08:00
zhongjiawei
8b9d61acfb runc:remove bindfd logic entirely 2023-09-12 10:55:40 +08:00
zhongjiawei
e6be706e79 runc:modify patch for 1.1.8 2023-07-28 09:46:10 +08:00
zhongjiawei
8a63d08b9d runc:sync some patches 2023-06-21 16:27:12 +08:00
zhongjiawei
32c785c209 runc:modify runc make command to satisfy the compile options 2023-06-09 11:20:29 +08:00
zhongjiawei
66dc1f0009 runc:fix /sys/fs/cgroup mounts and Prohibit /proc and /sys to be symlinks 2023-04-04 14:32:06 +08:00
zhongjiawei
24c3117ee9 runc:libcontainer: skip chown of /dev/null caused by fd redirection 2023-03-21 20:05:09 +08:00
zhaozhen
2a4953bb4b add loongarch64 support for runc 2023-03-16 17:42:51 +08:00
zhongjiawei
31b4d61040 runc:make runc spec compatible 1.0.0.rc3 
1.adapt DisableOOMKiller, OOMScoreAdj position adjustment.
2.adapt to BlackIO json parsing field change modification.
 2023-02-09 16:48:00 +08:00
zhongjiawei
3d57a4060e runc:modify linuxcontainer startime uint64 type tobe string 2023-01-17 15:21:17 +08:00
zhongjiawei
cc832e086a runc:support specify umask 2022-12-17 14:20:46 +08:00
zhongjiawei
8318951e31 runc: runc log forward to syslog 2022-11-07 19:44:59 +08:00
zhong-jiawei-1
99b2a44578 runc:patch round to runc 1.1.3 2022-11-04 11:42:04 +08:00
zhongjiawei
b6e8f99009 runc: fix systemd cgroup after memory type changed 2022-08-16 19:56:53 +08:00
zhongjiawei
c24ea62da1 runc: change Umask to 0022 2022-08-09 20:29:45 +08:00
cenhuilin
e7614429c9 runc: fix connect container failed when reading partially written state.json content 2022-07-20 01:34:49 +00:00
songyanting
e48716dd7e sync patches 
patch/0126-runc-add-check-in-spec.patch
patch/0127-runc-add-mount-destination-validation-fix-CVE-2021.patch
patch/0128-runc-optimize-nsexec-logging.patch
patch/0129-runc-improve-log-for-debugging.patch
patch/0130-runc-fix-cgroup-info-print-error.patch
 2022-01-26 22:59:29 +08:00
xiadanni
2f6befc1d9 runc:build security options 
Signed-off-by: xiadanni <xiadanni1@huawei.com>
 2021-03-18 11:18:36 +08:00
xiadanni
86bbece715 runc: sync bugfix 
1. add cpu and memory info when print cgroup info
2. fix freezing race

Signed-off-by: xiadanni <xiadanni1@huawei.com>
 2021-03-18 11:10:23 +08:00
yangyanchao
356cf9ad42 runc:sys:add symbol for riscv64 
Signed-off-by: yangyanchao <yangyanchao6@huawei.com>
 2020-12-15 14:52:48 +08:00
xiadanni
573b34b3bb runc: don't deny all devices when update cgroup resource 
Signed-off-by: xiadanni <xiadanni1@huawei.com>
 2020-11-25 15:42:31 +08:00
xiadanni
450a0907cf runc: fix permission denied 
reason: when exec as root and config.Cwd is not owned by root,
exec will fail because root doesn't have the caps.

Signed-off-by: Kurnia D Win <kurnia.d.win@gmail.com>
Signed-off-by: xiadanni <xiadanni1@huawei.com>
 2020-07-09 16:02:37 +08:00
xiadanni1
ab5af31922 runc: use git-commit to store commit ID 
Change-Id: Ib43bafb0ec680082520d85530ef783b68bc08671
Signed-off-by: xiadanni1 <xiadanni1@huawei.com>
 2020-06-12 01:19:00 +08:00
xiadanni1
1029fc9d1c rootfs: do not permit /proc mounts to non-directories 
mount(2) will blindly follow symlinks, which is a problem because it
allows a malicious container to trick runc into mounting /proc to an
entirely different location (and thus within the attacker's control for
a rename-exchange attack).

This is just a hotfix (to "stop the bleeding"), and the more complete
fix would be finish libpathrs and port runc to it (to avoid these types
of attacks entirely, and defend against a variety of other /proc-related
attacks). It can be bypased by someone having "/" be a volume controlled
by another container.

Fixes: CVE-2019-19921
Signed-off-by: Aleksa Sarai <asarai@suse.de>
Signed-off-by: xiadanni1 <xiadanni1@huawei.com>
 2020-04-15 17:01:50 +08:00
xiadanni1
e85c7e153b runc:Pass back the pid of runc:[1:CHILD] so we can wait on it 
reason:This allows the libcontainer to automatically clean up
runc:[1:CHILD] processes created as part of nsenter.

Signed-off-by: Alex Fang <littlelightlittlefire@gmail.com>
 2020-03-20 21:31:32 +08:00
Grooooot
ba3d1f2aa6 runc: sync patches 
Signed-off-by: Grooooot <isula@huawei.com>
 2020-03-05 19:34:03 +08:00
openeuler-iSula
5904ba4dcf runc: package init 
Signed-off-by: openeuler-iSula <isula@huawei.com>
 2019-12-29 15:34:20 +08:00