Miklos Szeredi 438c84c2f0
ovl: don't follow redirects if redirect_dir=off ...
Overlayfs is following redirects even when redirects are disabled. If this
is unintentional (probably the majority of cases) then this can be a
problem. E.g. upper layer comes from untrusted USB drive, and attacker
crafts a redirect to enable read access to otherwise unreadable
directories.
If "redirect_dir=off", then turn off following as well as creation of
redirects. If "redirect_dir=follow", then turn on following, but turn off
creation of redirects (which is what "redirect_dir=off" does now).
This is a backward incompatible change, so make it dependent on a config
option.
Reported-by: David Howells <dhowells@redhat.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
2017-12-11 11:28:10 +01:00
2017-09-06 17:27:26 -07:00
2017-09-17 10:48:00 -05:00
2016-12-01 10:50:49 +01:00
2017-05-18 10:33:51 -06:00
2016-04-28 07:51:59 -06:00
2014-01-24 10:55:21 -06:00
2016-12-14 23:48:11 -05:00
2011-03-22 17:44:17 -07:00
2014-04-07 16:36:08 -07:00
2017-11-13 15:38:19 +00:00
2017-02-27 18:43:45 -08:00
2017-07-10 11:40:19 -07:00
2015-05-15 01:10:38 -04:00
2011-08-13 18:34:03 -07:00
2017-05-12 15:57:15 -07:00
2016-03-11 17:02:09 +01:00
2017-02-20 12:16:05 +01:00
2017-05-16 08:44:08 -03:00
2017-10-15 00:47:23 -04:00
2017-09-06 17:27:24 -07:00
2015-10-04 11:36:07 +01:00
2016-06-05 10:36:01 -07:00
2016-09-27 11:03:58 +02:00
2015-02-28 09:57:50 -08:00
2017-10-19 12:58:21 -06:00
2016-02-10 16:25:52 +00:00
2011-03-15 15:02:51 +02:00
2015-07-23 20:59:40 +02:00
2015-07-23 20:59:40 +02:00
2017-09-26 14:30:48 -06:00
2017-08-21 15:54:48 -07:00
2015-02-10 14:30:30 -08:00
2012-02-19 10:30:52 -08:00
2017-10-31 13:49:24 -04:00
2015-10-29 12:57:48 -05:00
2012-03-07 16:08:24 +01:00
2012-05-10 11:45:31 +01:00
2011-11-04 12:01:48 -07:00
2014-02-20 14:48:51 +01:00
2017-10-31 13:49:24 -04:00
2015-02-10 14:30:28 -08:00
2013-05-28 12:02:12 +02:00
2017-09-04 21:42:22 +02:00
2016-10-24 08:12:35 -02:00
2016-08-02 19:35:21 -04:00
2014-10-16 12:43:57 +01:00
2016-07-01 16:17:15 -06:00
2015-02-28 09:57:50 -08:00
2017-09-14 14:54:39 -04:00
2017-12-11 11:28:10 +01:00
2017-10-25 11:01:05 +02:00
2015-11-02 18:18:25 -07:00
2017-11-05 18:58:07 -05:00
2017-11-17 16:10:00 -08:00
2016-04-28 07:51:59 -06:00
2017-02-27 18:43:46 -08:00
2013-09-11 15:59:38 -07:00
2013-07-25 12:34:15 +02:00
2011-02-17 22:04:46 +01:00
2014-12-29 15:40:18 -07:00
2016-03-09 15:33:06 -07:00
2014-11-27 18:48:44 +00:00
2017-04-20 08:47:47 -05:00
2015-09-13 14:38:51 -06:00
2017-09-19 09:20:33 +02:00
2016-08-03 15:43:58 -06:00
2011-07-04 10:54:28 +03:00
2017-10-16 11:55:52 +02:00
2016-03-22 15:36:02 -07:00
2017-09-13 09:11:44 -07:00
2011-03-31 11:26:23 -03:00
2013-04-27 13:27:43 -05:00
2016-12-09 16:49:54 +11:00
438c84c2f0