Affected by GO-2025-3781 and 2 other vulnerabilities

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

The highest tagged major version is v6.

auth

package

v0.1.0 Latest Latest Go to latest Published: Oct 7, 2023 License: Apache-2.0 Imports: 4 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/lxc/incus

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
type Authorizer
- func LoadAuthorizer(name string, config map[string]any, logger logger.Logger, ...) (Authorizer, error)
type UserAccess

Constants ¶

This section is empty.

Variables ¶

View Source

var ErrUnknownDriver = fmt.Errorf("Unknown driver")

ErrUnknownDriver is the "Unknown driver" error.

Functions ¶

This section is empty.

Types ¶

type Authorizer ¶

type Authorizer interface {
	AddProject(projectID int64, name string) error
	DeleteProject(projectID int64) error
	RenameProject(projectID int64, newName string) error

	StopStatusCheck()

	UserAccess(username string) (*UserAccess, error)
	UserIsAdmin(r *http.Request) bool
	UserHasPermission(r *http.Request, projectName string, permission string) bool
}

func LoadAuthorizer ¶

func LoadAuthorizer(name string, config map[string]any, logger logger.Logger, projectsGetFunc func() (map[int64]string, error)) (Authorizer, error)

type UserAccess ¶

type UserAccess struct {
	Admin    bool
	Projects map[string][]string
}

UserAccess struct for permission checks.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
oidc

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL