Nalin Dahyabhai 31db4f8d06 Fix TOCTOU error when bind and cache mounts use "src" values ... Fix a time-of-check/time-of-use error when mounting type=bind and type=cache directories that use a "src" flag. A hostile writer could use a concurrently-running stage or build to replace that "src" location between the point when we had resolved possible symbolic links and when runc/crun/whatever actually went to create the bind mount (CVE-2024-11218). Stop ignoring the "src" option for cache mounts when there's no "from" option. Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>		2025-01-17 14:33:43 -05:00
..
config	Drop copyStringSlice() and copyStringStringMap()	2024-06-05 11:01:07 -04:00
mkcw	internal: use fileutils.(Le|E)xists	2024-04-12 09:58:14 +02:00
open	Add an internal/open package	2025-01-17 13:31:10 -05:00
parse	internal: use fileutils.(Le|E)xists	2024-04-12 09:58:14 +02:00
sbom	build,commit: add --sbom to scan and produce SBOMs when committing	2024-01-19 13:55:57 -05:00
source	internal: use fileutils.(Le|E)xists	2024-04-12 09:58:14 +02:00
tmpdir	Add godoc for pkg/parse.GetTempDir	2023-11-15 14:27:21 -05:00
util	Replace map[K]bool with map[K]struct{} where it makes sense	2024-01-05 15:58:43 +00:00
volumes	Fix TOCTOU error when bind and cache mounts use "src" values	2025-01-17 14:33:43 -05:00
types.go	Allow cache mounts to be stages or additional build contexts	2025-01-17 13:30:35 -05:00