Affected by GO-2022-0396 and 6 other vulnerabilities

GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

devices

package

v1.0.0-rc2 Latest Latest Go to latest Published: Sep 29, 2016 License: Apache-2.0 Imports: 7 Imported by: 373

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/opencontainers/runc

Documentation ¶

Rendered for

Index ¶

Variables
func DeviceFromPath(path, permissions string) (*configs.Device, error)
func HostDevices() ([]*configs.Device, error)
func Major(devNumber int) int64
func Minor(devNumber int) int64

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrNotADevice = errors.New("not a device node")
)

Functions ¶

func DeviceFromPath ¶

func DeviceFromPath(path, permissions string) (*configs.Device, error)

Given the path to a device and it's cgroup_permissions(which cannot be easily queried) look up the information about a linux device and return that information as a Device struct.

func HostDevices ¶

func HostDevices() ([]*configs.Device, error)

func Major ¶

func Major(devNumber int) int64

func Minor ¶

func Minor(devNumber int) int64

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL