c0185aea5c
Improve security across containerization ( #898 )
...
This PR fixes a number of issues:
- validate descriptor digests before filesystem use
- validate container and exec ids before building paths in
ManagedContainer
- Check for attribute length when consuming extended attributes in
ContainerizationEXT4
- Check directory name length when formatting an ext4 fs
- Prevent OCI image layout load from reading host files through a
symlink
- Validate registry auth realm before exchanging credentials
---------
Signed-off-by: Kathryn Baldauf <k_baldauf@apple.com >
Co-authored-by: John Logan <john_logan@apple.com >
Co-authored-by: Raj Aryan Singh <rajaryan_singh@apple.com >
Co-authored-by: Raj <realrajaryan@gmail.com >
2026-08-28 13:22:06 -07:00
Arnav Reddy
55d1dc95e2
ImageStore: write state.json atomically ( #835 )
...
save() encodes into state.json in place, so a concurrent reader can
observe a truncated or garbled file.
2026-08-10 09:43:03 -04:00
Kathryn Baldauf
ec2ee3e94d
Update license header on all files to include the current year ( #470 )
...
Related to https://github.com/apple/container/pull/1024
Signed-off-by: Kathryn Baldauf <k_baldauf@apple.com >
2026-01-05 13:08:48 -08:00
Dmitry Kovba
bb0cd39177
Lowercase error messages ( #440 )
...
For consistency, all error messages are lowercased.
2025-12-09 05:38:48 -08:00
J Logan
995a231348
Removes "all rights reserved" from license header. ( #309 )
2025-10-03 13:27:59 -07:00
Dmitry Kovba
14482784db
Ensure mutable properties aren't accessed outside their intended thread-safe usage patterns ( #247 )
...
This PR modifies the access level of certain mutable properties to
ensure their thread-safe usage. It doesn't address
https://github.com/apple/containerization/issues/246 at this time.
2025-08-06 18:44:27 -07:00
Michael Crosby
5d2d7a1bc3
update license header removing new line ( #99 )
...
Fixes #63
Signed-off-by: crosbymichael <michael_crosby@apple.com >
2025-06-12 09:57:35 -04:00
Danny Canter
f49f668936
Updates to license headers ( #17 )
...
- Capitalize containerization.
- Wrap "All rights reserved" to a new line.
Signed-off-by: Danny Canter <danny_canter@apple.com >
2025-06-05 16:16:22 -07:00
+6
3407cc3f16
initial commit
...
Co-authored-by: Aditya Ramani <a_ramani@apple.com >
Co-authored-by: Agam Dua <agam_dua@apple.com >
Co-authored-by: Danny Canter <danny_canter@apple.com >
Co-authored-by: Dmitry Kovba <dkovba@apple.com >
Co-authored-by: Eric Ernst <eric_ernst@apple.com >
Co-authored-by: Evan Hazlett <ehazlett@apple.com >
Co-authored-by: Gilbert Song <gilbertsong@apple.com >
Co-authored-by: Hugh Bussell <hbussell@apple.com >
Co-authored-by: John Logan <john_logan@apple.com >
Co-authored-by: Kathryn Baldauf <k_baldauf@apple.com >
Co-authored-by: Madhu Venugopal <mvenugopal@apple.com >
Co-authored-by: Michael Crosby <michael_crosby@apple.com >
Co-authored-by: Sidhartha Mani <sidhartha_mani@apple.com >
Co-authored-by: Tanweer Noor <tnoor@apple.com >
Co-authored-by: Ximena Perez Diaz <xperez528@gmail.com >
Co-authored-by: Yibo Zhuang <yzhuang@apple.com >
2025-06-05 16:15:21 -07:00
