Skip to content
This repository has been archived by the owner on Jun 11, 2020. It is now read-only.

Commit

Permalink
Revert "Merge pull request #10 from seemethere/apply_patches_1706"
Browse files Browse the repository at this point in the history
This reverts commit fc48a25, reversing
changes made to 519d2ac.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
  • Loading branch information
thaJeztah committed Feb 13, 2019
1 parent 99ec935 commit 07b2637
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 249 deletions.
238 changes: 0 additions & 238 deletions libcontainer/nsenter/cloned_binary.c

This file was deleted.

11 changes: 0 additions & 11 deletions libcontainer/nsenter/nsexec.c
Original file line number Diff line number Diff line change
Expand Up @@ -438,9 +438,6 @@ void join_namespaces(char *nslist)
free(namespaces);
}

/* Defined in cloned_binary.c. */
int ensure_cloned_binary(void);

void nsexec(void)
{
int pipenum;
Expand All @@ -456,14 +453,6 @@ void nsexec(void)
if (pipenum == -1)
return;

/*
* We need to re-exec if we are not in a cloned binary. This is necessary
* to ensure that containers won't be able to access the host binary
* through /proc/self/exe. See CVE-2019-5736.
*/
if (ensure_cloned_binary() < 0)
bail("could not ensure we are a cloned binary");

/* Parse all of the netlink configuration. */
nl_parse(pipenum, &config);

Expand Down

0 comments on commit 07b2637

Please sign in to comment.