Affected by GO-2022-0396 and 5 other vulnerabilities

GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

rootless

package

v1.0.0-rc4 Latest Latest Go to latest Published: Aug 2, 2017 License: Apache-2.0 Imports: 5 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Manager struct {
	Cgroups *configs.Cgroup
	Paths   map[string]string
}

func (m *Manager) Apply(pid int) error

func (m *Manager) Destroy() error

func (m *Manager) Freeze(state configs.FreezerState) error

func (m *Manager) GetAllPids() ([]int, error)

func (m *Manager) GetPaths() map[string]string

func (m *Manager) GetPids() ([]int, error)

func (m *Manager) GetStats() (*cgroups.Stats, error)

func (m *Manager) Set(container *configs.Config) error