Skip to content
Snippets Groups Projects
Commit 7bb056dc authored by Simon McVittie's avatar Simon McVittie
Browse files

pv-wrap, FlatpakExports: Refuse to export parents of a reserved directory

Some of our reserved paths, notably /run/pressure-vessel and
/var/pressure-vessel, are not at the top level. We must avoid allowing
the parents of these directories to be exported, because if we allowed
that, it would break our ability to write to the child: for example, if
we bind-mount /run from the host, we will not be able to create
/run/pressure-vessel in the root-owned /run.

This is very similar to
https://github.com/flatpak/flatpak/commit/e3507918c0e496b0d111653e0e15e74108dbce16
in the Flatpak 1.15.x development branch, also written by me.

steamrt/tasks#434

Helps: https://github.com/ValveSoftware/steam-for-linux/issues/10789


Signed-off-by: default avatarSimon McVittie <smcv@collabora.com>
parent 2debb5f4
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment