From 6310535b3cbafd1a0e1512a7a00735ce63f5af86 Mon Sep 17 00:00:00 2001 From: Leonard Lyubich Date: Wed, 19 May 2021 19:16:54 +0300 Subject: [PATCH] [#505] ir/container: Check key ownership in Put container handler Check if new container was signed by its owner, and otherwise prohibit operation. Signed-off-by: Leonard Lyubich --- pkg/innerring/processors/container/process_container.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/innerring/processors/container/process_container.go b/pkg/innerring/processors/container/process_container.go index 1eafad29c..ab85e20ae 100644 --- a/pkg/innerring/processors/container/process_container.go +++ b/pkg/innerring/processors/container/process_container.go @@ -61,7 +61,7 @@ func (cp *Processor) checkPutContainer(e *containerEvent.Put) error { return fmt.Errorf("incorrect container format: %w", err) } - return nil + return cp.checkKeyOwnership(cnr, key) } func (cp *Processor) approvePutContainer(e *containerEvent.Put) {