Regression due to CVE mitigation from 39292 #39348
Description
#39292 broke docker cp (discovered by @ehazlett trying to run make on buildkit repo)
@cpuguy83 @thaJeztah @AkihiroSuda @tonistiigi
Repro:
rm -rf /tmp/out
docker build --iidfile=/tmp/iid - <<EOF
FROM scratch
COPY --from=alpine /etc/os-release /
EOF
cid=$(docker create $(cat /tmp/iid) foo)
mkdir -p /tmp/out
docker cp $cid:/ /tmp/out
ls /tmp/out/os-release