xiadanni c5a97831ab containerd:reduce permissions for bundle dir to fix CVE-2021-41103 ...

upstream:
6886c6a2ec
v1 runtime: reduce permissions for bundle dir

7c621e1fcc
btrfs: reduce permissions on plugin directories

Signed-off-by: xiadanni <xiadanni1@huawei.com>
(cherry picked from commit b4bc26bf252f387c3b26ace2ee20972a67530388)

2021-11-06 17:40:34 +08:00

..

0001-grpc-vendor-grpc-fix-grpc-map-panic.patch

first commit

2019-12-30 12:24:38 +08:00

0002-sys-sys-count-steal-time-when-calculating-Sys.patch

first commit

2019-12-30 12:24:38 +08:00

0003-oci-oci-add-files-cgroups-support.patch

first commit

2019-12-30 12:24:38 +08:00

0004-runv-vendor-runv-compatibility.patch

first commit

2019-12-30 12:24:38 +08:00

0005-containerd-add-spec-for-build.patch

first commit

2019-12-30 12:24:38 +08:00

0006-shim-optimize-shim-lock-in-runtime-v1.patch

first commit

2019-12-30 12:24:38 +08:00

0007-shim-Increase-reaper-buffer-size-and-non-bl.patch

first commit

2019-12-30 12:24:38 +08:00

0008-runtime-Use-named-pipes-for-shim-logs.patch

first commit

2019-12-30 12:24:38 +08:00

0009-runtime-fix-pipe-in-broken-may-cause-shim-l.patch

first commit

2019-12-30 12:24:38 +08:00

0010-runtime-fix-pipe-in-broken-may-cause-shim-l.patch

first commit

2019-12-30 12:24:38 +08:00

0011-runtime-Add-timeout-and-cancel-to-shim-fifo.patch

first commit

2019-12-30 12:24:38 +08:00

0012-bump-bump-containerd-to-1.2.0.2.patch

first commit

2019-12-30 12:24:38 +08:00

0013-log-support-log-init-pid-to-start-event-log.patch

first commit

2019-12-30 12:24:38 +08:00

0014-event-resend-exit-event-when-detect-container.patch

first commit

2019-12-30 12:24:38 +08:00

0015-restore-cleanup-container-pid-1.patch

first commit

2019-12-30 12:24:38 +08:00

0016-create-runc-delete-force-before-create.patch

first commit

2019-12-30 12:24:38 +08:00

0017-exit-using-init.exit-indicate-container-is-ex.patch

first commit

2019-12-30 12:24:38 +08:00

0018-containerd-shim-Dump-log-to-file-when-docker-.patch

first commit

2019-12-30 12:24:38 +08:00

0019-restore-check-shim-alive-when-containerd-is-r.patch

first commit

2019-12-30 12:24:38 +08:00

0020-events-resend-pending-exit-events-on-restore.patch

first commit

2019-12-30 12:24:38 +08:00

0021-containerd-Update-the-version-info-of-contain.patch

first commit

2019-12-30 12:24:38 +08:00

0022-containerd-bump-version-1.2.0.4.patch

first commit

2019-12-30 12:24:38 +08:00

0023-containerd-set-create-and-exec-timeout.patch

first commit

2019-12-30 12:24:38 +08:00

0024-create-cleanup-runc-dirty-files-on-start.patch

first commit

2019-12-30 12:24:38 +08:00

0025-restore-skip-load-task-in-creating.patch

first commit

2019-12-30 12:24:38 +08:00

0026-exit-optimize-init.exit-record.patch

first commit

2019-12-30 12:24:38 +08:00

0027-log-make-tester-happy.patch

first commit

2019-12-30 12:24:38 +08:00

0028-restore-delete-task-in-containerd-restoring.patch

first commit

2019-12-30 12:24:38 +08:00

0029-restore-delete-task-asynchronously.patch

first commit

2019-12-30 12:24:38 +08:00

0030-event-fix-events-lost-when-loadTask-failed.patch

first commit

2019-12-30 12:24:38 +08:00

0031-containerd-enable-relro-flags.patch

first commit

2019-12-30 12:24:38 +08:00

0032-containerd-enable-bep-ldflags.patch

first commit

2019-12-30 12:24:38 +08:00

0033-containerd-fix-opened-file-not-close.patch

first commit

2019-12-30 12:24:38 +08:00

0034-containerd-add-buildid-in-Makefile.patch

first commit

2019-12-30 12:24:38 +08:00

0035-containerd-fix-the-path-of-containerd.spec-in.patch

first commit

2019-12-30 12:24:38 +08:00

0036-containerd-support-container-start-timeout-se.patch

first commit

2019-12-30 12:24:38 +08:00

0037-containerd-Fix-fd-leak-of-shim-log.patch

first commit

2019-12-30 12:24:38 +08:00

0037-containerd-fix-shim-std-logs-not-close-after-.patch

first commit

2019-12-30 12:24:38 +08:00

0038-containerd-add-timeout-for-I-O-waitgroups.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0038-containerd-support-kill-D-state-container.patch

first commit

2019-12-30 12:24:38 +08:00

0039-containerd-fix-shouldKillAllOnExit-check.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0039-containerd-modify-containerd-shim-to-ad.patch

first commit

2019-12-30 12:24:38 +08:00

0040-containerd-add-shim-exit-when-bundle-dir-does.patch

first commit

2019-12-30 12:24:38 +08:00

0041-containerd-fix-containerd-call-runv-delete-directly.patch

first commit

2019-12-30 12:24:38 +08:00

0042-containerd-close-inherit-shim.sock-fd-to-adap.patch

first commit

2019-12-30 12:24:38 +08:00

0043-containerd-run-state-with-timeout-10s.patch

first commit

2019-12-30 12:24:38 +08:00

0044-containerd-add-copyright.patch

first commit

2019-12-30 12:24:38 +08:00

0044-containerd-change-tmpfile-directory-when-exec.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0045-containerd-shim-disable-fast-gc-on-arm.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0046-containerd-support-hot-upgrade.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0047-containerd-shim-exit-initiative-after-3s.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0048-containerd-modify-shim-initiative-exit-time.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0049-contaienrd-modify-shim-initiative-exit-time-for-post-hook.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0050-containerd-warp-and-process-return-errors.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0051-containerd-add-timeout-for-containerd-shim.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0052-containerd-modify-runtime-root-if-containe.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0053-containerd-add-pid-check-to-avoid-poststop-ho.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0054-containerd-clean-up-residual-container.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0055-containerd-add-LLT-for-containerd-shim-timeou.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0056-containerd-save-dumpstack-to-file.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0057-containerd-add-timeout-for-delete-command.patch

containerd:add patches

2020-03-05 15:54:34 +08:00

0059-containerd-add-GO_GCFLAGS-to-containerd-shim-making.patch

containerd: update patches

2020-11-25 20:05:42 +08:00

0060-containerd-do-not-disable-cgo-in-containerd-shim-mak.patch

containerd: update patches

2020-11-25 20:05:42 +08:00

0061-containerd-check-if-bundle-exists-before-create-bund.patch

containerd: update patches

2020-11-25 20:05:42 +08:00

0062-containerd-use-path-based-socket-for-shims.patch

containerd: update patches

2020-11-25 20:05:42 +08:00

0063-containerd-kill-init-directly-if-runtime-kill-failed.patch

containerd: update patches

2020-11-25 20:05:42 +08:00

0064-containerd-check-task-list-to-avoid-unnecessary-clea.patch

containerd: sync bugfix and bump version

2021-03-05 11:16:23 +08:00

0065-containerd-fix-dead-loop.patch

containerd: sync bugfix and bump version

2021-03-05 11:16:23 +08:00

0066-containerd-cleanup-dangling-shim-by-brand-new-context.patch

containerd: sync bugfix and bump version

2021-03-05 11:16:23 +08:00

0067-containerd-fix-potential-panic-for-task-in-unknown-state.patch

containerd: sync bugfix and bump version

2021-03-05 11:16:23 +08:00

0068-containerd-reduce-permissions-for-bundle-dir-to-fix-.patch

containerd:reduce permissions for bundle dir to fix CVE-2021-41103

2021-11-06 17:40:34 +08:00