mirror of https://github.com/aljazceru/kata-containers.git synced 2026-01-05 07:24:20 +01:00

Files

Chao Wu bb26bd73b1 safe-path: fix clippy warning

fix clippy warnings in safe-path lib to make clippy happy.

fixes: #4443

Signed-off-by: Chao Wu <chaowu@linux.alibaba.com>

2022-06-13 13:38:37 +08:00

src

safe-path: fix clippy warning

2022-06-13 13:38:37 +08:00

Cargo.toml

libs/safe-path: add crate to safely resolve fs paths

2022-04-21 10:01:21 +08:00

README.md

libs/safe-path: add crate to safely resolve fs paths

2022-04-21 10:01:21 +08:00

README.md

Safe Path

A library to safely handle filesystem paths, typically for container runtimes.

There are often path related attacks, such as symlink based attacks, TOCTTOU attacks. The safe-path crate provides several functions and utility structures to protect against path resolution related attacks.

Support

Operating Systems:

Linux

Reference

filepath-securejoin: secure_join() written in Go.
CVE-2021-30465: symlink related TOCTOU flaw in runC.

License

This code is licensed under Apache-2.0.