safe-path 0.1.0

A library to safely handle file system paths for container runtimes

Coverage
100%
5 out of 5 items documented0 out of 0 items with examples
Size
Source code size: 67.4 kB This is the summed size of all the files inside the crates.io package for this release.
Documentation size: 1.87 MB This is the summed size of all files generated by rustdoc for all configured targets
Links
Homepage
kata-containers/kata-containers
7227 1236 1513
crates.io
Dependencies
- libc ^0.2.100 normal
- tempfile ^3.2.0 dev
Versions
- 0.1.0 (2022-04-22)
Owners

Safe Path

A library to safely handle filesystem paths, typically for container runtimes.

There are often path related attacks, such as symlink based attacks, TOCTTOU attacks. The safe-path crate provides several functions and utility structures to protect against path resolution related attacks.

Support

Operating Systems:

Linux

Reference

filepath-securejoin: secure_join() written in Go.
CVE-2021-30465: symlink related TOCTOU flaw in runC.

License

This code is licensed under Apache-2.0.