diff options
author | TomSweeneyRedHat <tsweeney@redhat.com> | 2021-02-27 19:53:03 -0500 |
---|---|---|
committer | TomSweeneyRedHat <tsweeney@redhat.com> | 2021-03-21 17:25:35 -0400 |
commit | 5b2e71dc5b939378303daecab708c4042ee3677d (patch) | |
tree | 9062777311462325ce639e4ae8f2a1965218ca2f /libpod/runtime_volume.go | |
parent | ebc9871c9358b41daefc37e5db8119f596770cb7 (diff) | |
download | podman-5b2e71dc5b939378303daecab708c4042ee3677d.tar.gz podman-5b2e71dc5b939378303daecab708c4042ee3677d.tar.bz2 podman-5b2e71dc5b939378303daecab708c4042ee3677d.zip |
Validate passed in timezone from tz option
Erik Sjolund reported an issue where a badly formated file
could be passed into the `--tz` option and then the date in the container
would be badly messed up:
```
erik@laptop:~$ echo Hello > file.txt
erik@laptop:~$ podman run --tz=../../../home/erik/file.txt --rm -ti
docker.io/library/alpine cat /etc/localtime
Hello
erik@laptop:~$ podman --version
podman version 3.0.0-rc1
erik@laptop:~$
```
This fix checks to make sure the TZ passed in is a valid
value and then proceeds with the rest of the processing.
This was first reported as a potential security issue, but it
was thought not to be. However, I thought closing the hole
sooner rather than later would be good.
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
Diffstat (limited to 'libpod/runtime_volume.go')
0 files changed, 0 insertions, 0 deletions