Paul Holzinger 43fbde4e66 kube play: don't follow volume symlinks onto the host ...

For ConfigMap and Secret kube play volumes podman populates the data
from the yaml. However the volume content is not controlled by us and we
can be tricked following a symlink to a file on the host instead.

Fixes: CVE-2025-9566

Signed-off-by: Paul Holzinger <pholzing@redhat.com>

2025-09-04 16:18:35 +02:00

..

entities

Switch common, storage and image to monorepo.

2025-09-01 12:33:04 +02:00

filters

Switch common, storage and image to monorepo.

2025-09-01 12:33:04 +02:00

infra

kube play: don't follow volume symlinks onto the host

2025-09-04 16:18:35 +02:00

utils

Switch common, storage and image to monorepo.

2025-09-01 12:33:04 +02:00