Deniz Onur Duzgun 0f7b8698ec security: fix write symlink escape on the same allocdir path (#23738) ...

Resolves symlink escape when unarchiving by removing existing paths within the same allocation directory which can occur by writing a header that points to a symlink that lives outside of the sandbox environment. This exploit requires first compromising the Nomad client agent at the source allocation.

Ref: https://hashicorp.atlassian.net/browse/NET-10607
Ref: https://github.com/hashicorp/nomad-enterprise/pull/1725

2024-08-05 16:23:27 -04:00

..

alloc_watcher_test.go

security: add escape to arbitrary file access (#23319)

2024-07-08 14:00:09 -04:00

alloc_watcher_unix_test.go

security: fix write symlink escape on the same allocdir path (#23738)

2024-08-05 16:23:27 -04:00

alloc_watcher.go

security: fix write symlink escape on the same allocdir path (#23738)

2024-08-05 16:23:27 -04:00

doc.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

group_alloc_watcher_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

group_alloc_watcher.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00