Affected by GO-2024-2468 and 4 other vulnerabilities

GO-2024-2468: snapd Race Condition vulnerability in github.com/snapcore/snapd

GO-2024-2906: CVE-2024-5138 in github.com/snapcore/snapd

GO-2024-3007: snapd failed to restrict writes to the $HOME/bin path in github.com/snapcore/snapd

GO-2024-3008: snapd failed to properly check the file type when extracting a snap in github.com/snapcore/snapd

GO-2024-3009: snapd failed to properly check the destination of symbolic links when extracting a snap in github.com/snapcore/snapd

sandbox

package

v0.0.0-...-b0e2fe5 Latest Latest Go to latest Published: Sep 23, 2024 License: GPL-3.0 Imports: 1 Imported by: 36

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Package sandbox offers streamlined interfaces for the sandboxing primitives from the system for snapd use.

This section is empty.

This section is empty.

func ForceDevMode() bool

ForceDevMode returns true if the distribution doesn't implement required security features for confinement and devmode is forced.

func MockForceDevMode(forcedDevMode bool) (restore func())

MockForceDevMode fake the system to believe its in a distro that is in forced devmode as returned by ForceDevMode.

This section is empty.

Path	Synopsis
apparmor
notify Package notify implements high-level notify interface to a subset of AppArmor features	Package notify implements high-level notify interface to a subset of AppArmor features
notify/listener Package listener implements a high-level interface to the apparmor notification mechanism.	Package listener implements a high-level interface to the apparmor notification mechanism.
cgroup
seccomp
selinux