Affected by GO-2022-0452 and 4 other vulnerabilities

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

fs2

package

v1.0.1 Latest Latest Go to latest Published: Jul 16, 2021 License: Apache-2.0 Imports: 21 Imported by: 29

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/opencontainers/runc

Links

Open Source Insights

Documentation ¶

Rendered for

Index ¶

Constants
func CreateCgroupPath(path string, c *configs.Cgroup) (Err error)
func NewManager(config *configs.Cgroup, dirPath string, rootless bool) (cgroups.Manager, error)
func OOMKillCount(path string) (uint64, error)

Constants ¶

View Source

const UnifiedMountpoint = "/sys/fs/cgroup"

Variables ¶

This section is empty.

Functions ¶

func CreateCgroupPath ¶

func CreateCgroupPath(path string, c *configs.Cgroup) (Err error)

CreateCgroupPath creates cgroupv2 path, enabling all the supported controllers.

func NewManager ¶

func NewManager(config *configs.Cgroup, dirPath string, rootless bool) (cgroups.Manager, error)

NewManager creates a manager for cgroup v2 unified hierarchy. dirPath is like "/sys/fs/cgroup/user.slice/user-1001.slice/session-1.scope". If dirPath is empty, it is automatically set using config.

func OOMKillCount ¶

func OOMKillCount(path string) (uint64, error)

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL