cgroups: restrict allowed keys in 'unified' section
authorDaniel Golle <daniel@makrotopia.org>
Thu, 13 Aug 2020 00:22:11 +0000 (01:22 +0100)
committerDaniel Golle <daniel@makrotopia.org>
Thu, 13 Aug 2020 09:21:54 +0000 (10:21 +0100)
commit80c951668c0e3bd66888302a5b3f12c7324d9c82
tree5ad2762df9bd4ade3d26a0eaaafe8c5561a19950
parentfad899769e1411cc273785461f073a0f7931b9a0
cgroups: restrict allowed keys in 'unified' section

Prevent specifying directories by banning the use of '/' characters
and disallow some internal cgroup.* files as suggested in [1].

[1]: https://github.com/opencontainers/runtime-spec/pull/1040

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
jail/cgroups.c