selinux

Feb 8, 2023

Changes in this version

+ var ErrInvalidLabel = errors.New("invalid Label")

+ func MLSEnabled() bool

Nov 19, 2021

Changes in this version

+ func LfileLabel(fpath string) (string, error)

+ func LsetFileLabel(fpath string, label string) error

May 11, 2021

Changes in this version

+ func PrivContainerMountLabel() string

Dec 8, 2020

Changes in this version

+ var ErrContextMissing = errors.New("context does not have a match")

+ var ErrVerifierNil = errors.New("verifier function is nil")

+ func GetDefaultContextWithLevel(user, level, scon string) (string, error)

Jul 7, 2020

Changes in this version

+ const DefaultCategoryRange

+ var CategoryRange = DefaultCategoryRange

+ var ErrIncomparable = errors.New("incomparable levels")

+ var ErrLevelSyntax = errors.New("invalid level syntax")

+ var InvalidLabel = errors.New("Invalid Label")

+ func CalculateGlbLub(sourceRange, targetRange string) (string, error)

Apr 6, 2020

Changes in this version

+ func InitContainerLabels() (string, string)

+ func KVMContainerLabels() (string, string)

Mar 11, 2020

Changes in this version

+ func ClassIndex(class string) (int, error)

+ func ComputeCreateContext(source string, target string, class string) (string, error)

Aug 12, 2019 GO-2021-0085

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

Changes in this version

+ func PeerLabel(fd uintptr) (string, error)

+ func SetTaskLabel(label string) error

Apr 4, 2019 GO-2021-0085

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

Apr 2, 2019 GO-2021-0085

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

Changes in this version

+ func KeyLabel() (string, error)

+ func SetKeyLabel(label string) error

Dec 11, 2018 GO-2021-0085

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

Changes in this version

+ const Disabled

+ const Enforcing

+ const Permissive

+ var ErrEmptyPath = errors.New("empty path")

+ var ErrMCSAlreadyExists = errors.New("MCS label already exists")

+ func CanonicalizeContext(val string) (string, error)

+ func Chcon(fpath string, label string, recurse bool) error

+ func ClearLabels()

+ func ContainerLabels() (processLabel string, fileLabel string)

+ func CopyLevel(src, dest string) (string, error)

+ func CurrentLabel() (string, error)

+ func DefaultEnforceMode() int

+ func DisableSecOpt() []string

+ func DupSecOpt(src string) []string

+ func EnforceMode() int

+ func ExecLabel() (string, error)

+ func FSCreateLabel() (string, error)

+ func FileLabel(fpath string) (string, error)

+ func GetEnabled() bool

+ func PidLabel(pid int) (string, error)

+ func ROFileLabel() string

+ func ReleaseLabel(label string)

+ func ReserveLabel(label string)

+ func SecurityCheckContext(val string) error

+ func SetDisabled()

+ func SetEnforceMode(mode int) error

+ func SetExecLabel(label string) error

+ func SetFSCreateLabel(label string) error

+ func SetFileLabel(fpath string, label string) error

+ func SetSocketLabel(label string) error

+ func SocketLabel() (string, error)

+ type Context map[string]string

+ func NewContext(label string) Context

+ func (c Context) Get() string

Mar 22, 2017 GO-2021-0085

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc