policy

Documentation

Index

• func DefaultCRIMounts() []oci.Mount
• func DefaultCRIPrivilegedMounts() []oci.Mount
• func ExtendPolicyWithNetworkingMounts(sandboxID string, enforcer securitypolicy.SecurityPolicyEnforcer, ...) error

Functions

func DefaultCRIMounts

func DefaultCRIMounts() []oci.Mount

DefaultCRIMounts returns default mounts added to linux spec by containerD.

func DefaultCRIPrivilegedMounts

func DefaultCRIPrivilegedMounts() []oci.Mount

DefaultCRIPrivilegedMounts returns a slice of mounts which are added to the linux container spec when a container runs in a privileged mode.

func ExtendPolicyWithNetworkingMounts

func ExtendPolicyWithNetworkingMounts(sandboxID string, enforcer securitypolicy.SecurityPolicyEnforcer, spec *oci.Spec) error