fs2

package

Go to main page

Versions in this module

v1

v1.2.5

Feb 13, 2025

v1.2.4

Jan 6, 2025

v1.2.3

Dec 10, 2024

v1.2.2

Nov 15, 2024

v1.2.1

Nov 1, 2024

v1.2.0

Oct 21, 2024

Changes in this version

+ func CheckMemoryUsage(dirPath string, r *configs.Resources) error

+ type Manager struct

+ func (m *Manager) Apply(pid int) error

+ func (m *Manager) Destroy() error

+ func (m *Manager) Exists() bool

+ func (m *Manager) Freeze(state configs.FreezerState) error

+ func (m *Manager) GetAllPids() ([]int, error)

+ func (m *Manager) GetCgroups() (*configs.Cgroup, error)

+ func (m *Manager) GetFreezerState() (configs.FreezerState, error)

+ func (m *Manager) GetPaths() map[string]string

+ func (m *Manager) GetPids() ([]int, error)

+ func (m *Manager) GetStats() (*cgroups.Stats, error)

+ func (m *Manager) OOMKillCount() (uint64, error)

+ func (m *Manager) Path(_ string) string

+ func (m *Manager) Set(r *configs.Resources) error

v1.2.0-rc.3

Sep 3, 2024

v1.2.0-rc.2

Jun 26, 2024 GO-2024-3110

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.2.0-rc.1

Apr 3, 2024 GO-2024-3110

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.15

Oct 4, 2024

v1.1.14

Sep 3, 2024

v1.1.13

Jun 13, 2024 GO-2024-3110

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.12

Jan 23, 2024 GO-2024-3110

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.11

Jan 2, 2024 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.10

Nov 1, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.9

Aug 10, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.8

Jul 19, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.7

Apr 26, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.6

Apr 11, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.5

Mar 29, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.4

Aug 24, 2022 GO-2023-1627 +4 more

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.3

Jun 8, 2022 GO-2023-1627 +4 more

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.2

May 5, 2022 GO-2023-1627 +4 more

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.1

Mar 28, 2022 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.0

Jan 17, 2022 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ func NewManager(config *configs.Cgroup, dirPath string) (cgroups.Manager, error) — darwin/amd64, js/wasm, windows/amd64

+ func OOMKillCount(path string) (uint64, error) — darwin/amd64, js/wasm, windows/amd64

v1.1.0-rc.1

Dec 14, 2021 GO-2022-0274 +6 more

GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.3

Dec 3, 2021 GO-2022-0274 +6 more

GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.2

Aug 20, 2021 GO-2022-0274 +6 more

GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.1

Jul 16, 2021 GO-2022-0274 +6 more

GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0

Jun 17, 2021 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ const UnifiedMountpoint

+ func CreateCgroupPath(path string, c *configs.Cgroup) (Err error)

+ func NewManager(config *configs.Cgroup, dirPath string, rootless bool) (cgroups.Manager, error) — linux/amd64

+ func OOMKillCount(path string) (uint64, error) — linux/amd64

v1.0.0-rc95

May 19, 2021 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc94

May 10, 2021 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc93

Feb 3, 2021 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc92

Aug 5, 2020 GO-2022-0452 +4 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc91

Jun 30, 2020 GO-2022-0452 +4 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc90

Jan 22, 2020 GO-2022-0396 +5 more

GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc10

Jan 22, 2020 GO-2021-0085 +8 more

GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

GO-2021-0087: Race condition in github.com/opencontainers/runc

GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL