vvzvlad/portainer
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(swarm): fix environment security checks BE-12541 (#1666)

Browse Source
This commit is contained in:
andres-portainer
2026-01-14 12:25:50 -03:00
committed by GitHub
parent ac8fa7672e
commit 3e2fdb1891
2 changed files with 3 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/stacks/deployments/deployment_compose_config.go
+1 -8
View File
@@ -79,14 +79,7 @@ func (config *ComposeStackDeploymentConfig) Deploy() error {
securitySettings := &config.endpoint.SecuritySettings
if (!securitySettings.AllowBindMountsForRegularUsers ||
!securitySettings.AllowPrivilegedModeForRegularUsers ||
!securitySettings.AllowHostNamespaceForRegularUsers ||
!securitySettings.AllowDeviceMappingForRegularUsers ||
!securitySettings.AllowSysctlSettingForRegularUsers ||
!securitySettings.AllowContainerCapabilitiesForRegularUsers) &&
!isAdminOrEndpointAdmin {
if !isAdminOrEndpointAdmin {
if err := stackutils.ValidateStackFiles(config.stack, securitySettings, config.FileService); err != nil {
return err
}
api/stacks/deployments/deployment_swarm_config.go
+2 -3
View File
@@ -78,9 +78,8 @@ func (config *SwarmStackDeploymentConfig) Deploy() error {
settings := &config.endpoint.SecuritySettings
if !settings.AllowBindMountsForRegularUsers && !isAdminOrEndpointAdmin {
err = stackutils.ValidateStackFiles(config.stack, settings, config.FileService)
if err != nil {
if !isAdminOrEndpointAdmin {
if err := stackutils.ValidateStackFiles(config.stack, settings, config.FileService); err != nil {
return err
}
}