This repository has been archived by the owner on Feb 8, 2023. It is now read-only.

Update 2019 0308#20

Merged

CodeJuan merged 15 commits intodevelopfrom update_2019_0308

Mar 8, 2019

+1,269-511

Commits on Mar 8, 2019

factor out bind mount mountpoint creation

adrianreber
authored and
Ace-Tang
committed
Create mountpoints also on restore

adrianreber
authored and
Ace-Tang
committed
Remove detection for scope properties, which have always been broken

filbranden
authored and
Ace-Tang
committed
nsexec (CVE-2019-5736 ): avoid parsing environ

Christian Brauner
authored and
Ace-Tang
committed
Vendor in go-criu

adrianreber
authored and
Ace-Tang
committed
Use vendored in CRIU Go bindings

adrianreber
authored and
Ace-Tang
committed
switched travis to xenial

adrianreber
authored and
Ace-Tang
committed
exec: expose --preserve-fds

giuseppe
authored and
Ace-Tang
committed
nsenter: cloned_binary: detect and handle short copies

cyphar
authored and
Ace-Tang
committed
fix preserve-fds flag may cause runc hang

lifubang
authored and
Ace-Tang
committed
nsenter: cloned_binary: expand and add pre-3.11 fallbacks

cyphar
authored and
Ace-Tang
committed
nsenter: cloned_binary: use the runc statedir for O_TMPFILE

cyphar
authored and
Ace-Tang
committed
nsenter: cloned_binary: try to ro-bind /proc/self/exe before copying

cyphar
authored and
Ace-Tang
committed
nsenter: cloned_binary: userspace copy fallback if sendfile fails

cyphar
authored and
Ace-Tang
committed
README: link to /org/security/

vbatts
authored and
Ace-Tang
committed