Affected by GO-2024-2468 and 4 other vulnerabilities

GO-2024-2468: snapd Race Condition vulnerability in github.com/snapcore/snapd

GO-2024-2906: CVE-2024-5138 in github.com/snapcore/snapd

GO-2024-3007: snapd failed to restrict writes to the $HOME/bin path in github.com/snapcore/snapd

GO-2024-3008: snapd failed to properly check the file type when extracting a snap in github.com/snapcore/snapd

GO-2024-3009: snapd failed to properly check the destination of symbolic links when extracting a snap in github.com/snapcore/snapd

snaplock

package

v0.0.0-...-117ce26 Latest Latest Go to latest Published: Feb 25, 2025 License: GPL-3.0 Imports: 5 Imported by: 38

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/snapcore/snapd

Documentation ¶

Overview ¶

Package snaplock offers per-snap locking also used by snap-confine. The corresponding C code is in libsnap-confine-private/locking.c

Index ¶

func OpenLock(snapName string) (*osutil.FileLock, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func OpenLock ¶

func OpenLock(snapName string) (*osutil.FileLock, error)

OpenLock creates and opens a lock file associated with a particular snap.

NOTE: The snap lock is only accessible to root and is only intended to synchronize operations between snapd and snap-confine (and snap-update-ns in some cases). Any process holding the snap lock must not do any interactions with snapd to avoid deadlocks due to locked snap state.

Types ¶

This section is empty.

Source Files ¶

View all Source files

lock.go

Directories ¶

Path	Synopsis
runinhibit Package runinhibit contains operations for establishing, removing and querying snap run inhibition lock.	Package runinhibit contains operations for establishing, removing and querying snap run inhibition lock.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL