Affected by GO-2022-0344 and 4 other vulnerabilities

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

The highest tagged major version is v2.

seccomp

package

v1.4.10 Latest Latest Go to latest Published: Sep 29, 2021 License: Apache-2.0 Imports: 9 Imported by: 122

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/containerd/containerd

Links

Open Source Insights

Documentation ¶

Rendered for

Index ¶

func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp
func WithDefaultProfile() oci.SpecOpts
func WithProfile(profile string) oci.SpecOpts

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func DefaultProfile ¶

func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp

DefaultProfile defines the allowed syscalls for the default seccomp profile.

func WithDefaultProfile ¶

func WithDefaultProfile() oci.SpecOpts

WithDefaultProfile sets the default seccomp profile to the spec. Note: must follow the setting of process capabilities

func WithProfile ¶

func WithProfile(profile string) oci.SpecOpts

WithProfile receives the name of a file stored on disk comprising a json formatted seccomp profile, as specified by the opencontainers/runtime-spec. The profile is read from the file, unmarshaled, and set to the spec.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL