label

Mar 21, 2017 GO-2021-0085 +7 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Sep 29, 2016 GO-2021-0085 +8 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jun 3, 2016 GO-2021-0085 +8 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Apr 25, 2016 GO-2021-0085 +8 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Apr 12, 2016 GO-2021-0085 +8 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ func GetFileLabel(path string) (string, error)

Mar 10, 2016 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Feb 10, 2016 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jan 26, 2016 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Dec 11, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Nov 20, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ func RelabelNeeded(label string) bool

Sep 11, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ func IsShared(label string) bool

+ func Validate(label string) error

Aug 4, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jul 17, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jul 16, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ func DisableSecOpt() []string

+ func DupSecOpt(src string) []string

+ func FormatMountLabel(src string, mountLabel string) string

+ func GenLabels(options string) (string, string, error)

+ func GetPidLabel(pid int) (string, error)

+ func Init()

+ func InitLabels(options []string) (string, string, error)

+ func Relabel(path string, fileLabel string, relabel string) error

+ func ReserveLabel(label string) error

+ func SetFileCreateLabel(fileLabel string) error

+ func SetFileLabel(path string, fileLabel string) error

+ func SetProcessLabel(processLabel string) error

+ func UnreserveLabel(label string) error