Daniel J Walsh 4fd1965ab4 Add filepath glob support to --security-opt unmask ...

Want to allow users to specify --security-opt unmask=/proc/*.
This allows us to run podman within podman more securely, then
specifing umask=all, also gives the user more flexibilty.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>

2021-05-04 14:40:43 -04:00

..

annotations

Spelling

2020-12-22 13:34:31 -05:00

api

compat api: Networks must be empty instead of null

2021-05-04 11:25:12 +02:00

auth

Enable whitespace linter

2021-02-11 23:01:56 +01:00

autoupdate

TODO complete

2021-04-29 02:40:11 -04:00

bindings

Merge pull request #10018 from jmguzik/more-network-bindings-tests

2021-04-17 06:35:49 -04:00

cgroups

cgroups: force 64 bits to ParseUint

2021-04-09 10:09:54 +02:00

channel

fix closed the remote connection on pull causes service panic

2020-10-03 11:38:38 +08:00

checkpoint

Use functions and defines from checkpointctl

2021-03-02 17:00:06 +00:00

copy

podman cp: support copying on tmpfs mounts

2021-03-04 15:43:12 +01:00

criu

Add helper function to read out CRIU version

2018-10-23 12:52:03 +02:00

ctime

Re-add int64 casts for ctime

2019-07-23 15:43:40 -04:00

domain

is this a bug?

2021-05-04 00:32:51 +03:00

env

Ensure DefaultEnvVariables is used in Specgen

2020-08-18 15:17:46 -04:00

errorhandling

pkg/errorhandling.JoinErrors: don't throw away context for lone errors

2021-04-14 13:45:36 -04:00

hooks

bump go module to v3

2021-02-22 09:03:51 +01:00

inspect

bump go module to v3

2021-02-22 09:03:51 +01:00

kubeutils

prune remotecommand dependency

2021-02-25 10:02:41 -06:00

lookup

Enable whitespace linter

2021-02-11 23:01:56 +01:00

machine

Merge pull request #10170 from ashley-cui/machineone

2021-04-29 09:52:14 -04:00

namespaces

[NO TESTS NEEDED] Shrink the size of podman-remote

2021-03-29 09:49:45 -04:00

netns

rootless cni without infra container

2021-04-01 17:27:03 +02:00

network

Split libpod/network package

2021-03-15 14:01:52 +01:00

parallel

bump go module to v3

2021-02-22 09:03:51 +01:00

ps

bump go module to v3

2021-02-22 09:03:51 +01:00

registries

Document CONTAINERS_CONF/CONTAINERS_STORAGE_CONF Env variables

2021-03-10 06:34:47 -05:00

resolvconf

bump go module to v3

2021-02-22 09:03:51 +01:00

rootless

rootless: Tell the user what was led to the error, not just what it is

2021-04-27 11:20:43 +02:00

rootlessport

Enable whitespace linter

2021-02-11 23:01:56 +01:00

seccomp

Spelling

2020-12-22 13:34:31 -05:00

selinux

Fix SELinux functions names to not be repetitive

2020-04-23 15:57:34 -04:00

signal

Fix build for mips architecture follow-up

2021-01-07 15:04:22 +01:00

specgen

Add filepath glob support to --security-opt unmask

2021-05-04 14:40:43 -04:00

systemd

Fixes from make codespell

2021-04-21 13:16:33 -04:00

terminal

pkg/terminal: use c/storage/pkg/homedir

2021-03-08 09:21:13 +01:00

timetype

make lint: enable gocritic

2020-01-13 14:27:02 +01:00

trust

Enable whitespace linter

2021-02-11 23:01:56 +01:00

util

Fixes from make codespell

2021-04-21 13:16:33 -04:00