libcontainer

Jun 8, 2014 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2024-3304: Moby Race Condition vulnerability in github.com/moby/moby

  GO-2024-3305: Moby Race Condition vulnerability in github.com/moby/moby

Jun 6, 2014 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2024-3304: Moby Race Condition vulnerability in github.com/moby/moby

  GO-2024-3305: Moby Race Condition vulnerability in github.com/moby/moby

Changes in this version

+ func GetAllCapabilities() []string

type Container

+ DeviceNodes []*devices.Device

+ Routes []*Route

+ type Route struct

+ Destination string

+ Gateway string

+ InterfaceName string

+ Source string

May 8, 2014 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2024-3304: Moby Race Condition vulnerability in github.com/moby/moby

  GO-2024-3305: Moby Race Condition vulnerability in github.com/moby/moby

May 7, 2014 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2024-3304: Moby Race Condition vulnerability in github.com/moby/moby

  GO-2024-3305: Moby Race Condition vulnerability in github.com/moby/moby

Changes in this version

type Mount

+ Type string

+ type Mounts []Mount

+ func (s Mounts) OfType(t string) Mounts

Apr 8, 2014 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2024-3304: Moby Race Condition vulnerability in github.com/moby/moby

  GO-2024-3305: Moby Race Condition vulnerability in github.com/moby/moby

Changes in this version

type Capabilities

+ func (c Capabilities) Get(capp string) *Capability

type Capability

+ Enabled bool

type Container

+ CapabilitiesMask Capabilities

+ Mounts []Mount

+ type Mount struct

+ Destination string

+ Private bool

+ Source string

+ Writable bool

type Namespace

+ Enabled bool

type Namespaces

+ func (n Namespaces) Get(ns string) *Namespace

Mar 25, 2014 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2024-3304: Moby Race Condition vulnerability in github.com/moby/moby

  GO-2024-3305: Moby Race Condition vulnerability in github.com/moby/moby

Mar 10, 2014 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2024-3304: Moby Race Condition vulnerability in github.com/moby/moby

  GO-2024-3305: Moby Race Condition vulnerability in github.com/moby/moby

Changes in this version

+ var ErrUnkownCapability = errors.New("Unknown capability")

+ var ErrUnkownNamespace = errors.New("Unknown namespace")

+ var ErrUnsupported = errors.New("Unsupported method")

+ type Capabilities []*Capability

+ func (c Capabilities) Contains(capp string) bool

+ type Capability struct

+ Key string

+ Value capability.Cap

+ func GetCapability(key string) *Capability

+ func (c *Capability) MarshalJSON() ([]byte, error)

+ func (c *Capability) String() string

+ func (c *Capability) UnmarshalJSON(src []byte) error

+ type Container struct

+ Capabilities Capabilities

+ Cgroups *cgroups.Cgroup

+ Context Context

+ Env []string

+ Hostname string

+ Namespaces Namespaces

+ Networks []*Network

+ NoPivotRoot bool

+ ReadonlyFs bool

+ Tty bool

+ User string

+ WorkingDir string

+ type Context map[string]string

+ type Namespace struct

+ File string

+ Key string

+ Value int

+ func GetNamespace(key string) *Namespace

+ func (ns *Namespace) MarshalJSON() ([]byte, error)

+ func (ns *Namespace) String() string

+ func (ns *Namespace) UnmarshalJSON(src []byte) error

+ type Namespaces []*Namespace

+ func (n Namespaces) Contains(ns string) bool

+ type Network struct

+ Address string

+ Context Context

+ Gateway string

+ Mtu int

+ Type string