mirrors/talos
1
0
Fork 0
mirror of https://github.com/siderolabs/talos.git synced 2026-04-13 17:51:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
talos/internal/pkg
History
Andrey Smirnov 76931f4092
feat: enforce PID check on connections to services over file sockets 
Whitelist services which can access the file socket, refuse other
connections.

Fixes #12701

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 038cb87354eea1c1ff4612bdd13d1e77e595955a)
2026-03-26 15:58:41 +04:00
..
capability
feat: move dashboard package & run it in tty2
2023-02-28 12:00:25 +01:00
cgroup
feat: update Go to 1.26
2026-02-19 22:15:19 +01:00
cgroups
feat: update dependencies
2025-11-14 14:49:44 +04:00
console
fix: terminate dashboard gracefully on & switch back to tty1
2023-07-27 16:00:23 +02:00
containermode
fix: re-create cgroups when restarting runners
2025-09-12 11:33:15 +02:00
containers
feat: enforce PID check on connections to services over file sockets
2026-03-26 15:58:41 +04:00
cri
feat: enforce PID check on connections to services over file sockets
2026-03-26 15:58:41 +04:00
ctxutil
chore: optimize DNSResolveCacheController
2024-04-10 17:24:19 +03:00
dashboard
feat: allow dashboard mouse support
2026-02-27 16:50:27 +04:00
discovery/registry
feat: add filter for KubeSpan advertised networks
2026-02-12 15:02:47 +04:00
dns
test: fix flaky TestDNS
2025-07-11 21:13:48 +04:00
efivarfs
feat: update dependencies
2025-11-14 14:49:44 +04:00
encryption
chore: improve logging of disk encryption handling
2026-02-19 19:06:42 +04:00
endpoint
feat: add KMS assisted encryption key handler
2023-07-07 19:02:39 +03:00
environment
feat: add EnvironmentConfig document
2026-01-12 15:10:20 +01:00
etcd
fix: add hostname to endpoints
2026-01-15 22:56:46 +04:00
extensions
feat: stop mounting state partition
2025-09-18 15:34:28 +02:00
install
feat: enforce PID check on connections to services over file sockets
2026-03-26 15:58:41 +04:00
logind
chore: refactor how tools are being installed
2025-08-14 17:45:39 +04:00
measure
chore: refactor how tools are being installed
2025-08-14 17:45:39 +04:00
meta
feat: update dependencies
2025-09-30 20:55:29 +04:00
miniprocfs
feat: enforce PID check on connections to services over file sockets
2026-03-26 15:58:41 +04:00
mount
fix: unmount pseudo-late recursively
2026-03-16 14:14:01 +01:00
msguid
feat: update dependencies
2025-09-30 20:55:29 +04:00
ntp
fix: add a timeout for DNS resolving for NTP
2025-12-03 21:09:41 +04:00
partition
fix: wipe the first/last 1MiB in addition to wiping by signatures
2026-01-20 21:25:54 +04:00
pcap
refactor: update packet capture to use 'afpacket' interface
2023-11-07 15:52:04 +04:00
pci
chore: update Go to 1.19, Linux to 5.15.58
2022-08-03 17:03:58 +04:00
rng
feat: update dependencies
2025-11-14 14:49:44 +04:00
rootfs
refactor: stop using text/template in machined code paths
2025-08-07 19:22:23 +04:00
secureboot
feat: stop mounting state partition
2025-09-18 15:34:28 +02:00
selinux
feat: add image verification endpoint
2026-03-06 20:06:07 +04:00
smbios
feat: unify cmdline handling GRUB/systemd-boot
2025-10-17 16:00:46 +04:00
timex
fix: calculate log2i properly
2023-08-03 21:17:58 +04:00
toml
fix: rework the way CRI config generation is waited for
2025-06-03 14:56:52 +04:00
tpm
feat: update dependencies, Kubernetes 1.34.0-alpha.2
2025-06-30 19:05:22 +04:00
uki
feat: update dependencies
2025-11-14 14:49:44 +04:00
zboot
feat: multi profile UKIs
2025-02-11 15:41:55 +05:30