Add /opt to allowed directories

Some applications like nginx from Bitnami is using /opt for entrypoint and cmd bash scripts. We would like add this directory to allowed paths. Signed-off-by: Michal Jura <mjura@suse.com>
lockc-project · Dec 22, 2021 · 82cb5be · 82cb5be
1 parent 6504f91
commit 82cb5be
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/contrib/etc/lockc/lockc.toml b/contrib/etc/lockc/lockc.toml
@@ -358,6 +358,7 @@ allowed_paths_access_restricted = [
     "/home",
     "/lib",
     "/lib64",
+    "/opt",
     "/pause",
     "/proc",
     "/run",
@@ -390,6 +391,7 @@ allowed_paths_access_baseline = [
     "/home",
     "/lib",
     "/lib64",
+    "/opt",
     "/pause",
     "/proc",
     "/run",

diff --git a/lockc/src/settings.rs b/lockc/src/settings.rs
@@ -212,6 +212,7 @@ static DIR_ETC: &str = "/etc";
 static DIR_LIB: &str = "/lib";
 static DIR_LIB64: &str = "/lib64";
 static PAUSE: &str = "/pause";
+static DIR_OPT: &str = "/opt";
 static DIR_PROC: &str = "/proc";
 static DIR_RUN: &str = "/run";
 static DIR_CGROUP: &str = "/sys/fs/cgroup";
@@ -460,6 +461,7 @@ impl Settings {
                 DIR_LIB.to_string(),
                 DIR_LIB64.to_string(),
                 PAUSE.to_string(),
+                DIR_OPT.to_string(),
                 DIR_PROC.to_string(),
                 DIR_RUN.to_string(),
                 DIR_CGROUP.to_string(),
@@ -494,6 +496,7 @@ impl Settings {
                 DIR_LIB.to_string(),
                 DIR_LIB64.to_string(),
                 PAUSE.to_string(),
+                DIR_OPT.to_string(),
                 DIR_PROC.to_string(),
                 DIR_RUN.to_string(),
                 DIR_CGROUP.to_string(),