Affected by GO-2022-0278
and 6 other vulnerabilities
GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd
GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd
GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd
GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd
GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd
GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd
GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd
The highest tagged major version is
v2.
package
Version:
v1.5.3
Opens a new window with list of versions in this module.
Published: Jul 13, 2021
License: Apache-2.0
Opens a new window with license information.
Imports: 6
Opens a new window with list of imports.
Imported by: 10
Opens a new window with list of known importers.
Documentation
¶
-
type OS
-
type RealOS
-
func (RealOS) CopyFile(src, dest string, perm os.FileMode) error
-
func (RealOS) FollowSymlinkInScope(path, scope string) (string, error)
-
func (RealOS) Hostname() (string, error)
-
func (RealOS) LookupMount(path string) (mount.Info, error)
-
func (RealOS) MkdirAll(path string, perm os.FileMode) error
-
func (RealOS) Mount(source string, target string, fstype string, flags uintptr, data string) error
-
func (RealOS) RemoveAll(path string) error
-
func (RealOS) ResolveSymbolicLink(path string) (string, error)
-
func (RealOS) Stat(name string) (os.FileInfo, error)
-
func (RealOS) Unmount(target string) error
-
func (RealOS) WriteFile(filename string, data []byte, perm os.FileMode) error
-
type UNIX
type OS interface {
MkdirAll(path string, perm os.FileMode) error
RemoveAll(path string) error
Stat(name string) (os.FileInfo, error)
ResolveSymbolicLink(name string) (string, error)
FollowSymlinkInScope(path, scope string) (string, error)
CopyFile(src, dest string, perm os.FileMode) error
WriteFile(filename string, data []byte, perm os.FileMode) error
Hostname() (string, error)
}
OS collects system level operations that need to be mocked out
during tests.
RealOS is used to dispatch the real system level operations.
CopyFile will copy src file to dest file
FollowSymlinkInScope will call symlink.FollowSymlinkInScope.
Hostname will call os.Hostname to get the hostname of the host.
LookupMount gets mount info of a given path.
MkdirAll will call os.MkdirAll to create a directory.
Mount will call unix.Mount to mount the file.
RemoveAll will call os.RemoveAll to remove the path and its children.
ResolveSymbolicLink will follow any symbolic links
Stat will call os.Stat to get the status of the given file.
Unmount will call Unmount to unmount the file.
WriteFile will call ioutil.WriteFile to write data into a file.
UNIX collects unix system level operations that need to be
mocked out during tests.
Source Files
¶
Directories
¶
Click to show internal directories.
Click to hide internal directories.