summaryrefslogtreecommitdiff
path: root/test/copyimg
diff options
context:
space:
mode:
authorValentin Rothberg <vrothberg@suse.com>2018-10-12 13:18:36 +0200
committerValentin Rothberg <vrothberg@suse.com>2018-10-24 14:02:43 +0200
commit606a5cec8fa177fe64cff4ccf7cac05900fbe86c (patch)
treeeaed8639a17fb03e9efb7b0c1d9d2d3be3ecd89b /test/copyimg
parentcde41c0b84e55a4325937f9c577afa6ccc129b9a (diff)
downloadpodman-606a5cec8fa177fe64cff4ccf7cac05900fbe86c.tar.gz
podman-606a5cec8fa177fe64cff4ccf7cac05900fbe86c.tar.bz2
podman-606a5cec8fa177fe64cff4ccf7cac05900fbe86c.zip
runlabel: run any command
As discussed [1], the runlabel command should execute any command specified in a label. The reasoning behind is that we cannot restrict which options are passed to Podman which thereby has full access to the host (runlabels must be used with care). With the updated semantics, runlabel will substitute the commands with a basepath equal to "docker" or "podman" with "/proc/self/exe", and otherwise leave the command unchanged to execute any other command on the host. [1] https://github.com/containers/libpod/pull/1607#issuecomment-428321382 Signed-off-by: Valentin Rothberg <vrothberg@suse.com>
Diffstat (limited to 'test/copyimg')
0 files changed, 0 insertions, 0 deletions