kozorizki/pve-lxc-syscalld
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fill mknod whitelist

Browse Source 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
This commit is contained in:
Wolfgang Bumiller 2019-07-10 12:06:27 +02:00
parent bff40ab9c0
commit 3be1f04cb6
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/sys_mknod.rs
View File

@ -43,7 +43,16 @@ fn check_mknod_dev(mode: stat::mode_t, dev: stat::dev_t) -> bool {
let minor = stat::minor(dev);
match (sflag, major, minor) {
(libc::S_IFCHR, 1, 3) => true,
(libc::S_IFREG, 0, 0) => true, // touch
(libc::S_IFCHR, 0, 0) => true, // whiteout
(libc::S_IFCHR, 5, 0) => true, // /dev/tty
(libc::S_IFCHR, 5, 1) => true, // /dev/console
(libc::S_IFCHR, 5, 2) => true, // /dev/ptmx
(libc::S_IFCHR, 1, 3) => true, // /dev/null
(libc::S_IFCHR, 1, 5) => true, // /dev/zero
(libc::S_IFCHR, 1, 7) => true, // /dev/full
(libc::S_IFCHR, 1, 8) => true, // /dev/random
(libc::S_IFCHR, 1, 9) => true, // /dev/urandom
_ => false,
}
}