container

lee/container

Fork 0

mirror of https://github.com/apple/container.git synced 2026-07-15 05:57:01 +00:00

Commit Graph

Author	SHA1	Message	Date
Kathryn Baldauf	d6f052d206	Update license header on all files to include the current year (#1024 ) ## Motivation and Context Now that we're in 2026, we need to update the license headers on all the files. Unfortunately, Hawkeye doesn't have an attribute for the current year to help us avoid this in the future. Instead, I had to work around this by doing the following: 1. Update licenserc.toml with: ``` [properties] ... (other properties) currentYear = "2026" ``` 2. Update scripts/license-header.txt with ``` Copyright ©{{ " " }}{%- set created = attrs.git_file_created_year or attrs.disk_file_created_year -%}{%- set modified = props["currentYear"] -%}{%- if created != modified -%} {{created}}-{{modified}}{%- else -%}{{created}}{%- endif -%}{{ " " }}{{ props["copyrightOwner"] }}. ``` Then I removed these two changes before committing. After this PR is merged, all files will have recently had git updates, so the existing code for setting the modified year should work as intended. Signed-off-by: Kathryn Baldauf <k_baldauf@apple.com>	2026-01-05 13:09:34 -08:00
Dmitry Kovba	7926c317f6	Build input file cannot be found: '.../CAuditToken.o' (#908 ) Resolves a build error in Xcode: > Build input file cannot be found: '.../CAuditToken.o'. Did you forget to declare this file as an output of a script phase or custom build rule which produces it?	2025-11-20 16:01:25 -08:00
J Logan	b2f5f3ff2f	Adds client uid validation to XPC server. (#896 ) - When a user performs an `su` the effective UID changes but the bootstrap mach port does not, so that if container is running as `alice` from a GUI login session, it's possible to `su bob` and continue running container. While this doesn't pose a significant security risk as it's necessary for Alice to know Bob's password and manually enter it with `su`, this change closes the loophole by validating that client UID from the caller's audit token matches that of the API server.	2025-11-19 00:41:56 -03:00

Author

SHA1

Message

Date

Kathryn Baldauf

d6f052d206

Update license header on all files to include the current year (#1024 )

## Motivation and Context
Now that we're in 2026, we need to update the license headers on all the
files. Unfortunately, Hawkeye doesn't have an attribute for the current
year to help us avoid this in the future. Instead, I had to work around
this by doing the following:

1. Update licenserc.toml with:
     ```
      [properties]
       ... (other properties)
       currentYear = "2026"
     ```
 
2. Update scripts/license-header.txt with
    ```
Copyright ©{{ " " }}{%- set created = attrs.git_file_created_year or
attrs.disk_file_created_year -%}{%- set modified = props["currentYear"]
-%}{%- if created != modified -%} {{created}}-{{modified}}{%- else
-%}{{created}}{%- endif -%}{{ " " }}{{ props["copyrightOwner"] }}.
    ```

Then I removed these two changes before committing. After this PR is
merged, all files will have recently had git updates, so the existing
code for setting the modified year should work as intended.

Signed-off-by: Kathryn Baldauf <k_baldauf@apple.com>

2026-01-05 13:09:34 -08:00

Dmitry Kovba

7926c317f6

Build input file cannot be found: '.../CAuditToken.o' (#908 )

Resolves a build error in Xcode:
> Build input file cannot be found: '.../CAuditToken.o'. Did you forget
to declare this file as an output of a script phase or custom build rule
which produces it?

2025-11-20 16:01:25 -08:00

J Logan

b2f5f3ff2f

Adds client uid validation to XPC server. (#896 )

- When a user performs an `su` the effective UID changes but the bootstrap
  mach port does not, so that if container is running as `alice` from a
  GUI login session, it's possible to `su bob` and continue running
  container. While this doesn't pose a significant security risk as it's
  necessary for Alice to know Bob's password and manually enter it with
  `su`, this change closes the loophole by validating that client UID from
  the caller's audit token matches that of the API server.

2025-11-19 00:41:56 -03:00

3 Commits