Affected by GO-2026-4883 and 4 other vulnerabilities

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Docker: Race condition in docker cp allows bind mount redirection to host path in github.com/docker/docker

GO-2026-5668: Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap in github.com/docker/docker

GO-2026-5746: Docker: `PUT /containers/{id}/archive` executes container binary on the host in github.com/docker/docker

apparmor

package

v28.2.0-rc.2+incompatible Latest Latest Go to latest Published: May 22, 2025 License: Apache-2.0 Imports: 8 Imported by: 164

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/docker/docker

Links

Documentation ¶

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func InstallDefault ¶

func InstallDefault(name string) error

InstallDefault generates a default profile in a temp directory determined by os.TempDir(), then loads the profile into the kernel using 'apparmor_parser'.

func IsLoaded ¶

func IsLoaded(name string) (bool, error)

IsLoaded checks if a profile with the given name has been loaded into the kernel.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL