Affected by GO-2022-0390 and 6 other vulnerabilities

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

oci

package

v1.13.0-rc2 Latest Latest Go to latest Published: Nov 23, 2016 License: Apache-2.0 Imports: 8 Imported by: 372

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/docker/docker

Documentation ¶

Rendered for

Index ¶

func DefaultSpec() specs.Spec
func Device(d *configs.Device) specs.Device
func DevicesFromPath(pathOnHost, pathInContainer, cgroupPermissions string) (devs []specs.Device, devPermissions []specs.DeviceCgroup, err error)
func RemoveNamespace(s *specs.Spec, nsType specs.NamespaceType)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func DefaultSpec ¶

func DefaultSpec() specs.Spec

DefaultSpec returns default oci spec used by docker.

func Device ¶ added in v1.13.0

func Device(d *configs.Device) specs.Device

Device transforms a libcontainer configs.Device to a specs.Device object.

func DevicesFromPath ¶ added in v1.13.0

func DevicesFromPath(pathOnHost, pathInContainer, cgroupPermissions string) (devs []specs.Device, devPermissions []specs.DeviceCgroup, err error)

DevicesFromPath computes a list of devices and device permissions from paths (pathOnHost and pathInContainer) and cgroup permissions.

func RemoveNamespace ¶ added in v1.13.0

func RemoveNamespace(s *specs.Spec, nsType specs.NamespaceType)

RemoveNamespace removes the `nsType` namespace from OCI spec `s`

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL