safe-path
| Crates.io | safe-path |
| lib.rs | safe-path |
| version | 0.1.0 |
| created_at | 2022-04-22 02:32:38.503408+00 |
| updated_at | 2022-04-22 02:32:38.503408+00 |
| description | A library to safely handle file system paths for container runtimes |
| homepage | https://katacontainers.io/ |
| repository | https://github.com/kata-containers/kata-containers.git |
| max_upload_size | |
| id | 571979 |
| size | 64,197 |
Fabiano Fidêncio (fidencio)
documentation
README
Safe Path
A library to safely handle filesystem paths, typically for container runtimes.
There are often path related attacks, such as symlink based attacks, TOCTTOU attacks. The safe-path crate
provides several functions and utility structures to protect against path resolution related attacks.
Support
Operating Systems:
- Linux
Reference
filepath-securejoin: secure_join() written in Go.- CVE-2021-30465: symlink related TOCTOU flaw in
runC.
License
This code is licensed under Apache-2.0.