summaryrefslogtreecommitdiff
path: root/libpod/pod_api.go
diff options
context:
space:
mode:
authorTomSweeneyRedHat <tsweeney@redhat.com>2021-02-27 19:53:03 -0500
committerTomSweeneyRedHat <tsweeney@redhat.com>2021-03-21 17:25:35 -0400
commit5b2e71dc5b939378303daecab708c4042ee3677d (patch)
tree9062777311462325ce639e4ae8f2a1965218ca2f /libpod/pod_api.go
parentebc9871c9358b41daefc37e5db8119f596770cb7 (diff)
downloadpodman-5b2e71dc5b939378303daecab708c4042ee3677d.tar.gz
podman-5b2e71dc5b939378303daecab708c4042ee3677d.tar.bz2
podman-5b2e71dc5b939378303daecab708c4042ee3677d.zip
Validate passed in timezone from tz option
Erik Sjolund reported an issue where a badly formated file could be passed into the `--tz` option and then the date in the container would be badly messed up: ``` erik@laptop:~$ echo Hello > file.txt erik@laptop:~$ podman run --tz=../../../home/erik/file.txt --rm -ti docker.io/library/alpine cat /etc/localtime Hello erik@laptop:~$ podman --version podman version 3.0.0-rc1 erik@laptop:~$ ``` This fix checks to make sure the TZ passed in is a valid value and then proceeds with the rest of the processing. This was first reported as a potential security issue, but it was thought not to be. However, I thought closing the hole sooner rather than later would be good. Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
Diffstat (limited to 'libpod/pod_api.go')
0 files changed, 0 insertions, 0 deletions