diff options
| author | Daniel J Walsh <dwalsh@redhat.com> | 2021-05-01 05:50:31 -0400 |
|---|---|---|
| committer | Daniel J Walsh <dwalsh@redhat.com> | 2021-05-04 14:40:43 -0400 |
| commit | 4fd1965ab4d1395b5cc4a0e03526ef9c43f794ec (patch) | |
| tree | e944a81bbdd86ab0e166923c2fde320311718de0 /pkg/specgen/generate/oci.go | |
| parent | 7f2c27d43fc5d109c156e6203bf4901853b3cc7a (diff) | |
| download | podman-4fd1965ab4d1395b5cc4a0e03526ef9c43f794ec.tar.gz podman-4fd1965ab4d1395b5cc4a0e03526ef9c43f794ec.tar.bz2 podman-4fd1965ab4d1395b5cc4a0e03526ef9c43f794ec.zip | |
Add filepath glob support to --security-opt unmask
Want to allow users to specify --security-opt unmask=/proc/*.
This allows us to run podman within podman more securely, then
specifing umask=all, also gives the user more flexibilty.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Diffstat (limited to 'pkg/specgen/generate/oci.go')
0 files changed, 0 insertions, 0 deletions