You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
With our rootfs implementation, we need to support path canonicalization with explicit support for the rootfs as the root directory.
Then on top of that a regular canonicalize that treats / as a rootfs as well.
This is required to support both so applications can't trick our path checking
eg: /proc/../cpuinfo would currently trick our emulation and get a real host `/proc/cpuinfo
eg: /usr/../../test.txt would escape the rootfs and load a test.txt in the same folder as the rootfs if one existed
The text was updated successfully, but these errors were encountered:
fwiw bubblewrap might be of use here - Flatpak can use it and qemu-user-static (or a binfmt_misc executable of your choice) to emulate non-native arches easily, and it runs at (as fast as possible/native) speeds.
With our rootfs implementation, we need to support path canonicalization with explicit support for the rootfs as the root directory.
Then on top of that a regular canonicalize that treats
/
as a rootfs as well.This is required to support both so applications can't trick our path checking
eg:
/proc/../cpuinfo
would currently trick our emulation and get a real host `/proc/cpuinfoeg:
/usr/../../test.txt
would escape the rootfs and load atest.txt
in the same folder as the rootfs if one existedThe text was updated successfully, but these errors were encountered: