boustrophedon / extrasafe

78%

master: 78%

LAST BUILD ON BRANCH bindmounts_in_newroot

branch: bindmounts_in_newroot

CHANGE BRANCH

x

Reset

• bindmounts_in_newroot
• github-actions
• master
• tarpaulin_missing_coverage_subprocess
• bundled
• ci_run_examples
• pedantic_clippy
• warn_fd_close
• remove_time_set
• time_test
• ipc_coverage
• user-guide
• clippy-no-deps
• tarpaulin-conf
• ipc_coverage-rebase
• llvm-cov-coverage
• networking_coverage
• manual_workflow_trigger
• rel_v0.1.4
• refs/tags/v0.1.4
• reexport_syscalls
• cleanups
• v0.2.0
• refs/tags/v0.2.0
• use_seccompiler
• release-0.3
• refs/tags/v0.3.0
• landlock
• release-v0.4.0
• refs/tags/v0.4.0
• docupdate
• isolate
• refs/tags/v0.5.0
• ipc_server_ci
• ci_fixup
• userguide-update
• release-v0.5.1
• refs/tags/v0.5.1
• capabilities

Build # 8731126530

Build Type

Pull #43

github

Committed by boustrophedon

Commit Message

Prohibit . and .. in bindmounts

I'm not really sure if this could actually be exploited in any way, but
it also prevents accidentally making bindmounts outside the root
directory as well.

Also update the docstring for add_bind_mount

Pull Request Pull Request #43: Prohibit . and .. in bindmounts

Run Details

0 of 3 new or added lines in 1 file covered. (0.0%)

920 of 1187 relevant lines covered (77.51%)

96.02 hits per line