Re: [kubernetes/kubernetes] CVE-2017-1002102 - atomic writer volume handling allows arbitrary file deletion in host filesystem (#60814)
Michelle Au
@sgorbaty thanks for reviewing the patch! Hard links are fine in this case because they cannot cross mounts. In general, if you see any further issues, please report it following the security disclosure process.
—
You are receiving this because you are on a team that was mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.
Ming Fang
Forcing configmap and secret mounts to be readonly is not acceptable.
I should have the option to make it writeable.
Also the ReadOnlyAPIDataVolumes feature gate will be removed so I'm forced to change my application because of this.
Pushkar Joglekar
/label official-cve-feed
(Related to kubernetes/sig-security#1)
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are on a team that was mentioned.