vbatts/cri-o
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Merge pull request #1174 from runcom/fix-cve-1.8

Browse source 
[release-1.8] Add /proc/scsi to masked paths
This commit is contained in:
Daniel J Walsh 2017-11-22 09:59:58 -05:00 • committed by GitHub
commit d6ebe5d48c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
server/container_create.go
View file

@ -889,6 +889,7 @@ func (s *Server) createSandboxContainer(ctx context.Context, containerID string,
"/proc/timer_list", "/proc/timer_list",
"/proc/timer_stats", "/proc/timer_stats",
"/proc/sched_debug", "/proc/sched_debug",
"/proc/scsi",
"/sys/firmware", "/sys/firmware",
} { } {
specgen.AddLinuxMaskedPaths(mp) specgen.AddLinuxMaskedPaths(mp)

2
version/version.go
View file

@ -1,4 +1,4 @@
package version package version
// Version is the version of the build. // Version is the version of the build.
const Version = "1.8.0" const Version = "1.8.2-dev"