Affected by GO-2022-0278 and 6 other vulnerabilities

GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

The highest tagged major version is v2.

netns

package

v1.5.0 Latest Latest Go to latest Published: May 3, 2021 License: Apache-2.0 Imports: 10 Imported by: 10

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Rendered for

This section is empty.

This section is empty.

This section is empty.

type NetNS struct {
	// contains filtered or unexported fields
}

NetNS holds network namespace.

func LoadNetNS(path string) *NetNS

LoadNetNS loads existing network namespace.

func NewNetNS(baseDir string) (*NetNS, error)

NewNetNS creates a network namespace.

func (n *NetNS) Closed() (bool, error)

Closed checks whether the network namespace has been closed.

func (n *NetNS) Do(f func(cnins.NetNS) error) error

Do runs a function in the network namespace.

func (n *NetNS) GetPath() string

GetPath returns network namespace path for sandbox container

func (n *NetNS) Remove() error

Remove removes network namespace. Remove is idempotent, meaning it might be invoked multiple times and provides consistent result.