### CVE-2024-5321: Incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes
where BUILTIN\Users may be able to read container logs and NT
AUTHORITY\Authenticated Users may be able to modify container logs.

**Affected Versions**:
  - kubelet <= 1.27.15
  - kubelet <= 1.28.11
  - kubelet <= 1.29.6

                        log.info("Loaded persisted handle: {}", info.getPath());
                    } else {
                        Files.delete(handleFile);
                        log.debug("Deleted expired persisted handle: {}", handleFile);
                    }
                } catch (Exception e) {
                    log.error("Failed to load handle file: " + handleFile, e);

        } catch (final SmbException e) {
            if (log.isDebugEnabled()) {
                log.debug(String.format("VALIDATE_NEGOTIATE_INFO response code 0x%x", e.getNtStatus()));
            }
            log.trace("VALIDATE_NEGOTIATE_INFO returned error", e);
            if (req.getResponse().isReceived() && req.getResponse().isVerifyFailed()

                        cleaned++;
                    } catch (Exception e) {
                        log.error("Failed to auto-close resource: {}", holder.resourceId, e);
                    }
                }
            }
        }

        if (cleaned > 0) {
            log.info("Cleaned up {} abandoned resources", cleaned);
        }
    }

    /**

		mockData  = byte('[')
	)

	r := newMockReader(failAfter, mockData)
	decoder := NewDecoder(r, -1)

	for mv := range decoder.Stream() {
		t.Logf("depth=%d offset=%d len=%d (%v)", mv.Depth, mv.Offset, mv.Length, mv.Value)
	}

	err := decoder.Err()
	t.Logf("got error: %s", err)
	if err == nil {
		t.Fatalf("missing expected decoder error")
	}

	derr, ok := err.(DecoderError)
	if !ok {

	}
	for _, file := range files {
		f, err := w.Create(file.Name)
		if err != nil {
			log.Fatal(err)
		}
		_, err = f.Write([]byte(file.Body))
		if err != nil {
			log.Fatal(err)
		}
	}

	// Make sure to check the error on Close.
	err := w.Close()
	if err != nil {
		log.Fatal(err)
	}
}

func ExampleReader() {
	// Open a zip archive for reading.

                    log.info("Successfully unregistered witness: {}", registration.getRegistrationId());
                } else {
                    String errorMsg = response != null ? response.getError() : "Response was null";
                    log.warn("Failed to unregister witness: {}", errorMsg);
                }

            } catch (Exception e) {
                log.error("Error during witness unregistration", e);

 */
package org.codelibs.fess.opensearch.log.cbean.bs;

import java.util.ArrayList;
import java.util.List;
import java.util.Map;

import org.codelibs.fess.opensearch.log.allcommon.EsAbstractConditionBean;
import org.codelibs.fess.opensearch.log.bsentity.dbmeta.FavoriteLogDbm;
import org.codelibs.fess.opensearch.log.cbean.FavoriteLogCB;
import org.codelibs.fess.opensearch.log.cbean.ca.FavoriteLogCA;

     */
    public void sendNotification(WitnessEventType eventType, String resourceName) {
        // In a real implementation, this would send notifications to registered clients
        // For the mock, we just log it
        log.info("Mock sending notification: {} for resource: {}", eventType, resourceName);

        // Count how many registrations this affects
        int affectedRegistrations = 0;

    <img alt="Gradle Logo" src="images/gradle-dark-green-primary.png" width="600px">
  </picture>
</div>

<div align="center">
  <a href="https://ge.gradle.org/scans">
    <img src="https://img.shields.io/badge/Revved%20up%20by-Develocity-06A0CE?logo=Gradle&labelColor=02303A" alt="Revved up by Develocity">
  </a>