5763b8e4d7
Currently we don't check some modules for delegation to localhost. This would make it possible to overwrite any data which is writable within the bwrap context. Further the script module allows arbitrary code execution when delegated to localhost. The following modules are affected: * assemble: add safe path check * copy: add safe path check * patch: add safe path check * script: block completely * template: add safe path check * unarchive: add tests, fixed by safe path check of copy Change-Id: I2360219f50e6a28bb134468ead08ec72148ad192 Story: 2001681 |
||
|---|---|---|
| .. | ||
| assemble | ||
| dir | ||
| patch-dest | ||
| vars | ||
| archive.tar | ||
| file | ||
| patch | ||
| script.sh | ||
| vars.yaml | ||