nomad

mirror of https://github.com/kemko/nomad.git synced 2026-01-01 16:05:42 +03:00

Files

Tim Gross b7595c646d alloc fs: use case-insensitive check for reads of secret/private dir (#24125 )

When using the Client FS APIs, we check to ensure that reads don't traverse into
the allocation's secret dir and private dir. But this check can be bypassed on
case-insensitive file systems (ex. Windows, macOS, and Linux with obscure ext4
options enabled). This allows a user with `read-fs` permissions but not
`alloc-exec` permissions to read from the secrets dir.

This changeset updates the check so that it's case-insensitive. This risks false
positives for escape (see linked Go issue), but only if a task without
filesystem isolation deliberately writes into the task working directory to do
so, which is a fail-safe failure mode.

Ref: https://github.com/golang/go/issues/18358

Co-authored-by: dduzgun-security <deniz.duzgun@hashicorp.com>

2024-10-03 14:20:24 -04:00

input

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

alloc_dir_nonlinux_test.go

alloc fs: use case-insensitive check for reads of secret/private dir (#24125 )

2024-10-03 14:20:24 -04:00

alloc_dir_test.go

alloc fs: use case-insensitive check for reads of secret/private dir (#24125 )

2024-10-03 14:20:24 -04:00

alloc_dir.go

alloc fs: use case-insensitive check for reads of secret/private dir (#24125 )