confile: forbid absolute paths in config items that modify the cgroup layout

This is not a safety measure but merely is supposed to raise awareness that these paths are always relative to the cgroup root as determined by lxc.cgroup.relative. Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

confile: forbid absolute paths in config items that modify the cgroup layout
8e29bab7 · Christian Brauner · 98d92d9a · 8e29bab7
Unverified Commit 8e29bab7 authored Feb 15, 2021 by Christian Brauner
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

confile.c src/lxc/confile.c +3 -0

No files found.
--- a/src/lxc/confile.c
+++ b/src/lxc/confile.c
@@ -1683,6 +1683,9 @@ static int set_config_cgroup_dir(const char *key, const char *value,
 	if (lxc_config_value_empty(value))
 		return clr_config_cgroup_dir(key, lxc_conf, NULL);

+	if (abspath(value))
+		return syserrno_set(-EINVAL, "%s paths may not be absolute", key);
+
 	if (dotdot(value))
 		return syserrno_set(-EINVAL, "%s paths may not walk upwards via \"../\"", key);