Affected by GO-2022-0426 and 6 other vulnerabilities

GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

apparmor

package

v1.10.0 Latest Latest Go to latest Published: Mar 29, 2018 License: Apache-2.0 Imports: 0 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/cri-o/cri-o

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func EnsureDefaultApparmorProfile() error
func IsEnabled() bool

Constants ¶

View Source

const (
	// DefaultApparmorProfile is the name of default apparmor profile name.
	DefaultApparmorProfile = "crio-default"
	// ProfileRuntimeDefault is he profile specifying the runtime default.
	ProfileRuntimeDefault = "runtime/default"
	// ProfileNamePrefix is the prefix for specifying profiles loaded on the node.
	ProfileNamePrefix = "localhost/"
)

Variables ¶

This section is empty.

Functions ¶

func EnsureDefaultApparmorProfile ¶

func EnsureDefaultApparmorProfile() error

EnsureDefaultApparmorProfile dose nothing, when build without apparmor build tag.

func IsEnabled ¶

func IsEnabled() bool

IsEnabled returns false, when build without apparmor build tag.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL