Affected by GO-2022-0452 and 4 other vulnerabilities

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

fs2

package

v1.0.0-rc94 Latest Latest Go to latest Published: May 10, 2021 License: Apache-2.0 Imports: 18 Imported by: 29

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/opencontainers/runc

Documentation ¶

Rendered for

Index ¶

Constants
func CreateCgroupPath(path string, c *configs.Cgroup) (Err error)
func NewManager(config *configs.Cgroup, dirPath string, rootless bool) (cgroups.Manager, error)
func OOMKillCount(path string) (uint64, error)

Constants ¶

View Source

const UnifiedMountpoint = "/sys/fs/cgroup"

Variables ¶

This section is empty.

Functions ¶

func CreateCgroupPath ¶

func CreateCgroupPath(path string, c *configs.Cgroup) (Err error)

CreateCgroupPath creates cgroupv2 path, enabling all the supported controllers.

func NewManager ¶

func NewManager(config *configs.Cgroup, dirPath string, rootless bool) (cgroups.Manager, error)

NewManager creates a manager for cgroup v2 unified hierarchy. dirPath is like "/sys/fs/cgroup/user.slice/user-1001.slice/session-1.scope". If dirPath is empty, it is automatically set using config.

func OOMKillCount ¶

func OOMKillCount(path string) (uint64, error)

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL