Affected by GO-2022-0396
and 5 other vulnerabilities
GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc
GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc
This package is not in the latest version of its module.
Documentation
¶
This section is empty.
This section is empty.
ModKeyringPerm modifies permissions on a keyring by reading the current permissions, anding the bits with the given mask (clearing permissions) and setting additional permission bits
Source Files