Jorge Prendes
2ff8b97e67
Do not try to acquire capabilities we are not allowed to ( #2000 )
...
Currently reset_effective tries to acquire all know capabilities from a hardcoded list.
According to https://man7.org/linux/man-pages/man7/capabilities.7.html only capabilities in the permitted set can be acquired.
Trying to acquire a capability beyond those in the permitted set will result in EPERM (see https://man7.org/linux/man-pages/man2/capset.2.html ).
This change modifies reset_effective so that it only acquires the capabilities in the permitted set.
Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
2023-06-06 01:26:33 -07:00
Yashodhan
242718111c
Merge pull request #2007 from containers/dependabot/cargo/regex-1.8.4
...
(auto merged) chore(deps): bump regex from 1.8.3 to 1.8.4
2023-06-06 11:05:27 +05:30
dependabot[bot]
e54ebe8984
chore(deps): bump regex from 1.8.3 to 1.8.4
...
Bumps [regex](https://github.com/rust-lang/regex ) from 1.8.3 to 1.8.4.
- [Release notes](https://github.com/rust-lang/regex/releases )
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/regex/compare/1.8.3...1.8.4 )
---
updated-dependencies:
- dependency-name: regex
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-06 05:17:28 +00:00
Yashodhan
0c95dcc48a
Merge pull request #2011 from containers/dependabot/cargo/url-2.4.0
...
chore(deps): bump url from 2.3.1 to 2.4.0
2023-06-06 10:45:06 +05:30
Yashodhan
7b2ca88cea
Merge pull request #2010 from containers/dependabot/cargo/percent-encoding-2.3.0
...
chore(deps): bump percent-encoding from 2.2.0 to 2.3.0
2023-06-06 10:44:31 +05:30
github-actions[bot]
5cbf85771f
Merge pull request #2009 from containers/dependabot/cargo/parking_lot_core-0.9.8
2023-06-06 01:23:56 +00:00
github-actions[bot]
613d626963
Merge pull request #2008 from containers/dependabot/cargo/lock_api-0.4.10
2023-06-06 01:23:05 +00:00
github-actions[bot]
b223e72745
Merge pull request #2006 from containers/dependabot/cargo/wasmtime-wasi-9.0.3
2023-06-06 01:21:16 +00:00
dependabot[bot]
dd315eaacd
chore(deps): bump url from 2.3.1 to 2.4.0
...
Bumps [url](https://github.com/servo/rust-url ) from 2.3.1 to 2.4.0.
- [Release notes](https://github.com/servo/rust-url/releases )
- [Commits](https://github.com/servo/rust-url/compare/v2.3.1...v2.4.0 )
---
updated-dependencies:
- dependency-name: url
dependency-type: indirect
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-06 01:17:34 +00:00
dependabot[bot]
7237eb2c7c
chore(deps): bump percent-encoding from 2.2.0 to 2.3.0
...
Bumps [percent-encoding](https://github.com/servo/rust-url ) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/servo/rust-url/releases )
- [Commits](https://github.com/servo/rust-url/compare/v2.2.0...v2.3.0 )
---
updated-dependencies:
- dependency-name: percent-encoding
dependency-type: indirect
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-06 01:16:23 +00:00
dependabot[bot]
40821f577e
chore(deps): bump parking_lot_core from 0.9.7 to 0.9.8
...
Bumps [parking_lot_core](https://github.com/Amanieu/parking_lot ) from 0.9.7 to 0.9.8.
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Amanieu/parking_lot/compare/core-0.9.7...core-0.9.8 )
---
updated-dependencies:
- dependency-name: parking_lot_core
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-06 01:13:36 +00:00
dependabot[bot]
29202ed5df
chore(deps): bump lock_api from 0.4.9 to 0.4.10
...
Bumps [lock_api](https://github.com/Amanieu/parking_lot ) from 0.4.9 to 0.4.10.
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Amanieu/parking_lot/compare/lock_api-0.4.9...lock_api-0.4.10 )
---
updated-dependencies:
- dependency-name: lock_api
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-06 01:12:41 +00:00
dependabot[bot]
8fca7d7fa0
chore(deps): bump wasmtime-wasi from 9.0.2 to 9.0.3
...
Bumps [wasmtime-wasi](https://github.com/bytecodealliance/wasmtime ) from 9.0.2 to 9.0.3.
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases )
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/main/docs/WASI-some-possible-changes.md )
- [Commits](https://github.com/bytecodealliance/wasmtime/compare/v9.0.2...v9.0.3 )
---
updated-dependencies:
- dependency-name: wasmtime-wasi
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-06 01:10:53 +00:00
Yashodhan
79b6450a86
Replace Makefiles with Just ( #1823 )
...
Refactored the build system using `justfile`.
* Use just in CI instead of makefiles
* Remove makefiles completely
* Increase timeout in rust validation
2023-06-05 09:24:33 -07:00
dependabot[bot]
510cc8a124
chore(deps): bump cranelift-control from 0.96.2 to 0.96.3 ( #1995 )
...
Bumps [cranelift-control](https://github.com/bytecodealliance/wasmtime ) from 0.96.2 to 0.96.3.
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases )
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/main/docs/WASI-some-possible-changes.md )
- [Commits](https://github.com/bytecodealliance/wasmtime/commits )
---
updated-dependencies:
- dependency-name: cranelift-control
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-04 23:36:42 -07:00
dependabot[bot]
9d5dafbdf1
chore(deps): bump wasmtime from 9.0.2 to 9.0.3 ( #1993 )
...
Bumps [wasmtime](https://github.com/bytecodealliance/wasmtime ) from 9.0.2 to 9.0.3.
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases )
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/main/docs/WASI-some-possible-changes.md )
- [Commits](https://github.com/bytecodealliance/wasmtime/compare/v9.0.2...v9.0.3 )
---
updated-dependencies:
- dependency-name: wasmtime
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-04 23:36:26 -07:00
dependabot[bot]
d1811c7867
chore(deps): bump once_cell from 1.17.2 to 1.18.0 ( #2001 )
...
Bumps [once_cell](https://github.com/matklad/once_cell ) from 1.17.2 to 1.18.0.
- [Changelog](https://github.com/matklad/once_cell/blob/master/CHANGELOG.md )
- [Commits](https://github.com/matklad/once_cell/compare/v1.17.2...v1.18.0 )
---
updated-dependencies:
- dependency-name: once_cell
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-04 23:35:48 -07:00
Eric Fang
d09c984567
do not log error in the syscall crate ( #1973 )
...
* do not log error for mount in specific cases
* clean up the logs in the syscall module
* update toolchain to rust 1.70
---------
Signed-off-by: yihuaf <yihuaf@unkies.org>
2023-06-04 23:19:51 -07:00
github-actions[bot]
53ba8d41d3
Merge pull request #2003 from containers/dependabot/cargo/libc-0.2.145
2023-06-05 02:06:40 +00:00
github-actions[bot]
121a2b1138
Merge pull request #2002 from containers/dependabot/cargo/aho-corasick-1.0.2
2023-06-05 02:00:19 +00:00
dependabot[bot]
90946a1fbe
chore(deps): bump libc from 0.2.144 to 0.2.145
...
Bumps [libc](https://github.com/rust-lang/libc ) from 0.2.144 to 0.2.145.
- [Release notes](https://github.com/rust-lang/libc/releases )
- [Commits](https://github.com/rust-lang/libc/compare/0.2.144...0.2.145 )
---
updated-dependencies:
- dependency-name: libc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-05 01:54:19 +00:00
dependabot[bot]
20e7f05182
chore(deps): bump aho-corasick from 1.0.1 to 1.0.2
...
Bumps [aho-corasick](https://github.com/BurntSushi/aho-corasick ) from 1.0.1 to 1.0.2.
- [Commits](https://github.com/BurntSushi/aho-corasick/compare/1.0.1...1.0.2 )
---
updated-dependencies:
- dependency-name: aho-corasick
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-05 01:47:59 +00:00
github-actions[bot]
493f3f1076
Merge pull request #1998 from containers/dependabot/cargo/openssl-0.10.54
2023-06-02 01:21:23 +00:00
dependabot[bot]
b7d0f6b7ab
chore(deps): bump openssl from 0.10.53 to 0.10.54
...
Bumps [openssl](https://github.com/sfackler/rust-openssl ) from 0.10.53 to 0.10.54.
- [Release notes](https://github.com/sfackler/rust-openssl/releases )
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.53...openssl-v0.10.54 )
---
updated-dependencies:
- dependency-name: openssl
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-02 01:13:03 +00:00
dependabot[bot]
237e75f07f
chore(deps): bump rbpf from 0.1.0 to 0.2.0 ( #1994 )
...
Bumps [rbpf](https://github.com/qmonnet/rbpf ) from 0.1.0 to 0.2.0.
- [Commits](https://github.com/qmonnet/rbpf/compare/v0.1.0...v0.2.0 )
---
updated-dependencies:
- dependency-name: rbpf
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-01 11:12:31 -07:00
Toru Komatsu
cb75d26d8f
Merge pull request #1975 from yihuaf/yihuaf/journald
...
Implemented sending logs to systemd-journald
2023-05-31 20:47:37 +09:00
github-actions[bot]
28f63ff253
Merge pull request #1990 from containers/dependabot/cargo/chrono-0.4.26
2023-05-31 01:22:59 +00:00
github-actions[bot]
22f2b2dd4f
Merge pull request #1989 from containers/dependabot/cargo/mio-0.8.8
2023-05-31 01:16:56 +00:00
github-actions[bot]
6ab32c7d84
Merge pull request #1988 from containers/dependabot/cargo/openssl-0.10.53
2023-05-31 01:15:36 +00:00
dependabot[bot]
0c351c9cf2
chore(deps): bump chrono from 0.4.25 to 0.4.26
...
Bumps [chrono](https://github.com/chronotope/chrono ) from 0.4.25 to 0.4.26.
- [Release notes](https://github.com/chronotope/chrono/releases )
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md )
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.25...v0.4.26 )
---
updated-dependencies:
- dependency-name: chrono
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-31 01:12:36 +00:00
dependabot[bot]
4072b693e5
chore(deps): bump mio from 0.8.7 to 0.8.8
...
Bumps [mio](https://github.com/tokio-rs/mio ) from 0.8.7 to 0.8.8.
- [Release notes](https://github.com/tokio-rs/mio/releases )
- [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/mio/commits )
---
updated-dependencies:
- dependency-name: mio
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-31 01:06:39 +00:00
dependabot[bot]
8afd3294e6
chore(deps): bump openssl from 0.10.52 to 0.10.53
...
Bumps [openssl](https://github.com/sfackler/rust-openssl ) from 0.10.52 to 0.10.53.
- [Release notes](https://github.com/sfackler/rust-openssl/releases )
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.52...openssl-v0.10.53 )
---
updated-dependencies:
- dependency-name: openssl
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-31 01:05:12 +00:00
Toru Komatsu
0f46344180
Merge pull request #1987 from containers/dependabot/cargo/chrono-0.4.25
...
(auto merged) chore(deps): bump chrono from 0.4.24 to 0.4.25
2023-05-30 16:13:51 +09:00
github-actions[bot]
c3f73557e6
Merge pull request #1986 from containers/dependabot/cargo/wasmtime-wasi-9.0.2
2023-05-30 01:20:36 +00:00
github-actions[bot]
f44959ce87
Merge pull request #1985 from containers/dependabot/cargo/once_cell-1.17.2
2023-05-30 01:20:13 +00:00
dependabot[bot]
5a6200f73d
chore(deps): bump chrono from 0.4.24 to 0.4.25
...
Bumps [chrono](https://github.com/chronotope/chrono ) from 0.4.24 to 0.4.25.
- [Release notes](https://github.com/chronotope/chrono/releases )
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md )
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.24...v0.4.25 )
---
updated-dependencies:
- dependency-name: chrono
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-30 01:17:13 +00:00
dependabot[bot]
eceff1f2f4
chore(deps): bump wasmtime-wasi from 9.0.1 to 9.0.2
...
Bumps [wasmtime-wasi](https://github.com/bytecodealliance/wasmtime ) from 9.0.1 to 9.0.2.
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases )
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/main/docs/WASI-some-possible-changes.md )
- [Commits](https://github.com/bytecodealliance/wasmtime/compare/v9.0.1...v9.0.2 )
---
updated-dependencies:
- dependency-name: wasmtime-wasi
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-30 01:10:14 +00:00
dependabot[bot]
3b84293b24
chore(deps): bump once_cell from 1.17.1 to 1.17.2
...
Bumps [once_cell](https://github.com/matklad/once_cell ) from 1.17.1 to 1.17.2.
- [Changelog](https://github.com/matklad/once_cell/blob/master/CHANGELOG.md )
- [Commits](https://github.com/matklad/once_cell/compare/v1.17.1...v1.17.2 )
---
updated-dependencies:
- dependency-name: once_cell
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-30 01:09:53 +00:00
Yashodhan
7f6efb3fdc
Merge pull request #1984 from yihuaf/yihuaf/clean_up
...
deprecate crossbeam since it is merged with std
2023-05-29 12:57:56 +05:30
yihuaf
32f57e5b5c
deprecate crossbeam since it is merged with std
...
Signed-off-by: yihuaf <yihuaf@unkies.org>
2023-05-28 23:45:51 -07:00
dependabot[bot]
4ba681f012
chore(deps): bump cranelift-control from 0.96.1 to 0.96.2 ( #1979 )
...
Bumps [cranelift-control](https://github.com/bytecodealliance/wasmtime ) from 0.96.1 to 0.96.2.
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases )
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/main/docs/WASI-some-possible-changes.md )
- [Commits](https://github.com/bytecodealliance/wasmtime/commits )
---
updated-dependencies:
- dependency-name: cranelift-control
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-28 19:58:41 -07:00
dependabot[bot]
34b17adf42
chore(deps): bump wasmtime from 9.0.1 to 9.0.2 ( #1981 )
...
Bumps [wasmtime](https://github.com/bytecodealliance/wasmtime ) from 9.0.1 to 9.0.2.
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases )
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/main/docs/WASI-some-possible-changes.md )
- [Commits](https://github.com/bytecodealliance/wasmtime/compare/v9.0.1...v9.0.2 )
---
updated-dependencies:
- dependency-name: wasmtime
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-28 19:58:31 -07:00
dependabot[bot]
c96831dd43
chore(deps): bump webc from 5.0.0 to 5.0.2 ( #1983 )
...
Bumps [webc](https://github.com/wasmerio/pirita ) from 5.0.0 to 5.0.2.
- [Commits](https://github.com/wasmerio/pirita/commits )
---
updated-dependencies:
- dependency-name: webc
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-28 19:58:21 -07:00
dependabot[bot]
0252a112f5
chore(deps): bump log from 0.4.17 to 0.4.18 ( #1982 )
...
Bumps [log](https://github.com/rust-lang/log ) from 0.4.17 to 0.4.18.
- [Release notes](https://github.com/rust-lang/log/releases )
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/log/compare/0.4.17...0.4.18 )
---
updated-dependencies:
- dependency-name: log
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-28 19:58:11 -07:00
github-actions[bot]
88962d1ce9
Merge pull request #1980 from containers/dependabot/cargo/wat-1.0.66
2023-05-29 02:02:03 +00:00
github-actions[bot]
67503da9b7
Merge pull request #1978 from containers/dependabot/cargo/tokio-1.28.2
2023-05-29 01:59:07 +00:00
github-actions[bot]
3e1e4c8e79
Merge pull request #1977 from containers/dependabot/cargo/syscalls-0.6.12
2023-05-29 01:58:21 +00:00
github-actions[bot]
e396962b43
Merge pull request #1976 from containers/dependabot/cargo/mio-0.8.7
2023-05-29 01:50:14 +00:00
dependabot[bot]
c4480c08d7
chore(deps): bump wat from 1.0.65 to 1.0.66
...
Bumps [wat](https://github.com/bytecodealliance/wasm-tools ) from 1.0.65 to 1.0.66.
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases )
- [Commits](https://github.com/bytecodealliance/wasm-tools/compare/wat-1.0.65...wat-1.0.66 )
---
updated-dependencies:
- dependency-name: wat
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-29 01:49:09 +00:00
dependabot[bot]
958e5373f2
chore(deps): bump tokio from 1.28.1 to 1.28.2
...
Bumps [tokio](https://github.com/tokio-rs/tokio ) from 1.28.1 to 1.28.2.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.28.1...tokio-1.28.2 )
---
updated-dependencies:
- dependency-name: tokio
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-29 01:46:48 +00:00