Matt Heon 985b57d9f7 Validate the bind-propagation option to --mount ...

Similar to github.com/containers/buildah/pull/5761 but not
security critical as Podman does not have an expectation that
mounts are scoped (the ability to write a --mount option is
already the ability to mount arbitrary content into the container
so sneaking arbitrary options into the mount doesn't have
security implications). Still, bad practice to let users inject
anything into the mount command line so let's not do that.

Signed-off-by: Matt Heon <mheon@redhat.com>

2024-10-04 09:07:51 -04:00

..

createparse.go

Bump Go module to v5

2024-02-08 09:35:39 -05:00

ports_test.go

Unit tests for pkg/specgenutil pkg/signal

2022-04-25 14:48:39 -05:00

ports.go

pkg: switch to golang native error wrapping

2022-07-08 08:54:47 +02:00

specgen.go

Add --health-max-log-count, --health-max-log-size, --health-log-destination flags

2024-09-25 14:01:35 +02:00

specgenutil_test.go

specgenutil: record the pod userns in the annotations

2024-07-24 12:10:48 +02:00

util_test.go

Unit tests for pkg/specgenutil pkg/signal

2022-04-25 14:48:39 -05:00

util.go

cleanup: add new --stopped-only option

2024-08-27 15:01:23 +02:00

volumes_test.go

Replace strings.SplitN with strings.Cut

2024-01-11 13:50:15 +00:00

volumes.go

Validate the bind-propagation option to --mount

2024-10-04 09:07:51 -04:00