diff options
author | Lauri Võsandi <lauri.vosandi@gmail.com> | 2015-04-19 14:46:28 +0300 |
---|---|---|
committer | David Sterba <dsterba@suse.cz> | 2015-04-24 15:42:05 +0200 |
commit | 9a86668071e77b2da0173b8921153de4d7ba99d8 (patch) | |
tree | ae76c78a8f776f1815a4824817a52ce64d2b8bcb /Documentation | |
parent | 7732e6ef62159cc942897df0a358b784b62658c1 (diff) |
btrfs-progs: optionally enforce chroot for btrfs receive
This patch forces btrfs receive to issue chroot before
parsing the btrfs stream using command-line flag -C
to confine the process and minimize damage that could
be done via malicious btrfs stream.
Signed-off-by: Lauri Võsandi <lauri.vosandi@gmail.com>
[added long option variant, added docs]
Signed-off-by: David Sterba <dsterba@suse.cz>
Diffstat (limited to 'Documentation')
-rw-r--r-- | Documentation/btrfs-receive.asciidoc | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/Documentation/btrfs-receive.asciidoc b/Documentation/btrfs-receive.asciidoc index ed1e247f..bdbabdff 100644 --- a/Documentation/btrfs-receive.asciidoc +++ b/Documentation/btrfs-receive.asciidoc @@ -7,7 +7,7 @@ btrfs-receive - receive subvolumes from stdin/file. SYNOPSIS -------- -*btrfs receive* [-ve] [-f <infile>] [--max-errors <N>] <mount> +*btrfs receive* [options] <mount> DESCRIPTION ----------- @@ -34,6 +34,8 @@ verbose level more. -f <infile>:: By default, btrfs receive uses stdin to receive the subvolumes. Use this option to specify a file to use instead. +-C|--chroot:: +Confine the process to <mount> using chroot. -e:: Terminate after receiving an <end cmd> in the data stream. Without this option, the receiver terminates only if an error is recognized |