Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

Aleksa Sarai (2):
  VERSION: back to development
  VERSION: release v0.3.3

LGTMs: cyphar

The only user of this function was dropped in commit 90adf5c
("mkdir: do not return errors for incorrect directory modes or owners")
but we forgot to remove the function itself.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

testing_mocks_linux.go imports the testing package, and that import
leaks into any binary built with securejoin. This causes issues in
projects which check for that, such as Kubernetes (see
kubernetes/kubernetes#127832 and its tests).

This adds a level of indirection for hooks used to force testing
behaviour in procfs_linux.go, so that the mocks can be defined only in
_test.go files. This ensures that the testing package is only pulled
in for tests.

Signed-off-by: Stephen Kitt <skitt@redhat.com>

Stephen Kitt (1):
  Isolate the testing import in test code

LGTMs: cyphar

Ref: 6864912 ("Isolate the testing import in test code")
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

To make the code a little easier to follow, add some actual dummy
functions that we assign to rather than re-using previous functions in a
confusing way.

Fixes: 6864912 ("Isolate the testing import in test code")
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

open_tree(2) and fsopen(2) were added in Linux 5.2, not 4.18.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

The old documentation still referenced the filepath.SecureJoin proposal,
which is long-dead. We should reference the new os.OpenRoot proposal as
well as libpathrs.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>