Giuseppe Scrivano c0627de21d container: replace code with securejoin.OpenInRoot() ...

when the code was first added, there was no securejoin.OpenInRoot().
Since there is a function already provided by a dependency and already
used in libpod, replace the custom code with securejoin.OpenInRoot().

The new version does not report a symlink that points outside the
root, but it is still resolved relative to the specified mountpoint,
since that is the openat2 semantic.  It does not affect the security
of the function.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2025-03-19 09:32:47 +01:00

24 KiB

Raw Blame History

View Raw