Stefan Hajnoczi 5baa3b8e95 virtiofsd: sandbox mount namespace ... Use a mount namespace with the shared directory tree mounted at "/" and no other mounts. This prevents symlink escape attacks because symlink targets are resolved only against the shared directory and cannot go outside it. Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> Signed-off-by: Peng Tao <tao.peng@linux.alibaba.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>		2020-01-23 16:41:36 +00:00
..
virtiofsd	virtiofsd: sandbox mount namespace	2020-01-23 16:41:36 +00:00