Affected by GO-2022-0452
and 4 other vulnerabilities
GO-2022-0452 : Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627 : Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682 : rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc
GO-2023-1683 : runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110 : runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc
Discover Packages
github.com/opencontainers/runc
libcontainer
cgroups
manager
package
Version:
v1.1.1
Opens a new window with list of versions in this module.
Published: Mar 28, 2022
License: Apache-2.0
Opens a new window with license information.
Imports: 8
Opens a new window with list of imports.
Imported by: 5
Opens a new window with list of known importers.
Documentation
Documentation
¶
New returns the instance of a cgroup manager, which is chosen
based on the local environment (whether cgroup v1 or v2 is used)
and the config (whether config.Systemd is set or not).
NewWithPaths is similar to New, and can be used in case cgroup paths
are already well known, which can save some resources.
For cgroup v1, the keys are controller/subsystem name, and the values
are absolute filesystem paths to the appropriate cgroups.
For cgroup v2, the only key allowed is "" (empty string), and the value
is the unified cgroup path.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.