Affected by GO-2025-3829 and 5 other vulnerabilities

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Docker: Race condition in docker cp allows bind mount redirection to host path in github.com/docker/docker

GO-2026-5668: Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap in github.com/docker/docker

GO-2026-5746: Docker: `PUT /containers/{id}/archive` executes container binary on the host in github.com/docker/docker

capabilities

package

v23.0.10+incompatible Latest Latest Go to latest Published: Feb 16, 2024 License: Apache-2.0 Imports: 0 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/docker/docker

Documentation ¶

Overview ¶

Package capabilities allows to generically handle capabilities.

Index ¶

type Set
- func (set Set) Match(caps [][]string) []string

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Set ¶

type Set map[string]struct{}

Set represents a set of capabilities.

func (Set) Match ¶

func (set Set) Match(caps [][]string) []string

Match tries to match set with caps, which is an OR list of AND lists of capabilities. The matched AND list of capabilities is returned; or nil if none are matched.

Source Files ¶

View all Source files

caps.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL