mirror_qemu/tools/virtiofsd
Stefan Hajnoczi 5baa3b8e95 virtiofsd: sandbox mount namespace
Use a mount namespace with the shared directory tree mounted at "/" and
no other mounts.

This prevents symlink escape attacks because symlink targets are
resolved only against the shared directory and cannot go outside it.

Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Peng Tao <tao.peng@linux.alibaba.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
2020-01-23 16:41:36 +00:00
..
50-qemu-virtiofsd.json.in virtiofsd: add vhost-user.json file 2020-01-23 16:41:36 +00:00
Makefile.objs virtiofsd: Add Makefile wiring for virtiofsd contrib 2020-01-23 16:41:36 +00:00
buffer.c virtiofsd: add fuse_mbuf_iter API 2020-01-23 16:41:36 +00:00
fuse.h virtiofsd: Format imported files to qemu style 2020-01-23 16:41:36 +00:00
fuse_common.h virtiofsd: add fuse_mbuf_iter API 2020-01-23 16:41:36 +00:00
fuse_i.h virtiofsd: Plumb fuse_bufvec through to do_write_buf 2020-01-23 16:41:36 +00:00
fuse_log.c virtiofsd: Fix common header and define for QEMU builds 2020-01-23 16:41:36 +00:00
fuse_log.h virtiofsd: Format imported files to qemu style 2020-01-23 16:41:36 +00:00
fuse_lowlevel.c virtiofsd: check input buffer size in fuse_lowlevel.c ops 2020-01-23 16:41:36 +00:00
fuse_lowlevel.h virtiofsd: add --print-capabilities option 2020-01-23 16:41:36 +00:00
fuse_misc.h virtiofsd: Format imported files to qemu style 2020-01-23 16:41:36 +00:00
fuse_opt.c virtiofsd: Fix common header and define for QEMU builds 2020-01-23 16:41:36 +00:00
fuse_opt.h virtiofsd: Format imported files to qemu style 2020-01-23 16:41:36 +00:00
fuse_signals.c virtiofsd: Fix common header and define for QEMU builds 2020-01-23 16:41:36 +00:00
fuse_virtio.c virtiofsd: Pass write iov's all the way through 2020-01-23 16:41:36 +00:00
fuse_virtio.h virtiofsd: Fast path for virtio read 2020-01-23 16:41:36 +00:00
helper.c virtiofsd: passthrough_ll: add fallback for racy ops 2020-01-23 16:41:36 +00:00
passthrough_helpers.h virtiofsd: Format imported files to qemu style 2020-01-23 16:41:36 +00:00
passthrough_ll.c virtiofsd: sandbox mount namespace 2020-01-23 16:41:36 +00:00