Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Do not set DOCKER_TMP to be owned by remapped root
The remapped root does not need access to this dir. Having this owned by the remapped root opens the host up to an uprivileged user on the host being able to escalate privileges. While it would not be normal for the remapped UID to be used outside of the container context, it could happen. Signed-off-by: Brian Goff <cpuguy83@gmail.com>
- Loading branch information