-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[v4.4.1-rhel] Backport #17528 #17533
[v4.4.1-rhel] Backport #17528 #17533
Conversation
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: mheon The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
LGTM |
LGTM, tests are unhappy here too, will rerun them |
@mheon do you know what's going on here? |
CI is in bad shape. Cirrus issues. We are basically stuck until it's solved. |
* Utils must support higher level API to create Tar with chrooted into directory * Volume export: use TarwithChroot instead of Tar so we can make sure no symlink can be exported by tar if it exists outside of the source directory. * container export: use chroot and Tar instead of Tar so we can make sure no symlink can be exported by tar if it exists outside of the mointPoint. [NO NEW TESTS NEEDED] [NO TESTS NEEDED] Race needs combination of external/in-container mechanism which is hard to repro in CI. CVE: https://access.redhat.com/security/cve/CVE-2023-0778 Signed-off-by: Aditya R <[email protected]> MH: Cherry-pick to v4.4.1-rhel per RHBZ 2169618 Signed-off-by: Matt Heon <[email protected]>
22b2615
to
017535d
Compare
No, this was all Cirrus infra afaik. Rebased on top of latest v4.4.1-rhel, hopefully will pass now. |
OK, this is ready @ashley-cui @baude PTAL and merge |
/lgtm |
Cherry-pick #17528 to v4.4.1-rhel per RHBZ 2169618
Does this PR introduce a user-facing change?