Paul Holzinger 54bde8aa5c kube play: don't follow volume symlinks onto the host ...

For ConfigMap and Secret kube play volumes podman populates the data
from the yaml. However the volume content is not controlled by us and we
can be tricked following a symlink to a file on the host instead.

Fixes: CVE-2025-9566

Signed-off-by: Paul Holzinger <pholzing@redhat.com>

2025-09-17 08:40:37 -04:00

..

entities

health check: add on-failure actions

2022-09-27 10:40:36 +02:00

filters

pkg: switch to golang native error wrapping

2022-07-08 08:54:47 +02:00

infra

kube play: don't follow volume symlinks onto the host

2025-09-17 08:40:37 -04:00

utils

pkg: switch to golang native error wrapping

2022-07-08 08:54:47 +02:00