policy

Documentation

Index

• type MountMonitoringSecurityPolicyEnforcer
  • func (p *MountMonitoringSecurityPolicyEnforcer) EnforceCreateContainerPolicy(containerID string, argList []string, envList []string) (err error)
  • func (p *MountMonitoringSecurityPolicyEnforcer) EnforceDeviceMountPolicy(target string, deviceHash string) (err error)
  • func (p *MountMonitoringSecurityPolicyEnforcer) EnforceDeviceUnmountPolicy(target string) (err error)
  • func (p *MountMonitoringSecurityPolicyEnforcer) EnforceOverlayMountPolicy(containerID string, layerPaths []string) (err error)

Types

type MountMonitoringSecurityPolicyEnforcer

type MountMonitoringSecurityPolicyEnforcer struct {
	DeviceMountCalls   int
	DeviceUnmountCalls int
	OverlayMountCalls  int
}

For testing. Records the number of calls to each method so we can verify the expected interactions took place.

func (*MountMonitoringSecurityPolicyEnforcer) EnforceCreateContainerPolicy

func (p *MountMonitoringSecurityPolicyEnforcer) EnforceCreateContainerPolicy(containerID string, argList []string, envList []string) (err error)

func (*MountMonitoringSecurityPolicyEnforcer) EnforceDeviceMountPolicy

func (p *MountMonitoringSecurityPolicyEnforcer) EnforceDeviceMountPolicy(target string, deviceHash string) (err error)

func (*MountMonitoringSecurityPolicyEnforcer) EnforceDeviceUnmountPolicy

func (p *MountMonitoringSecurityPolicyEnforcer) EnforceDeviceUnmountPolicy(target string) (err error)

func (*MountMonitoringSecurityPolicyEnforcer) EnforceOverlayMountPolicy

func (p *MountMonitoringSecurityPolicyEnforcer) EnforceOverlayMountPolicy(containerID string, layerPaths []string) (err error)