Affected by GO-2022-0396 and 8 other vulnerabilities

GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

seccomp

package

v0.1.1 Latest Latest Go to latest Published: Apr 25, 2016 License: Apache-2.0 Imports: 3 Imported by: 419

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/opencontainers/runc

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func ConvertStringToAction(in string) (configs.Action, error)
func ConvertStringToArch(in string) (string, error)
func ConvertStringToOperator(in string) (configs.Operator, error)
func InitSeccomp(config *configs.Seccomp) error
func IsEnabled() bool

Constants ¶

This section is empty.

Variables ¶

View Source

var ErrSeccompNotEnabled = errors.New("seccomp: config provided but seccomp not supported")

Functions ¶

func ConvertStringToAction ¶ added in v0.0.4

func ConvertStringToAction(in string) (configs.Action, error)

ConvertStringToAction converts a string into a Seccomp rule match action. Actions use the names they are assigned in Libseccomp's header, though some (notable, SCMP_ACT_TRACE) are not available in this implementation and will return errors. Attempting to convert a string that is not a valid action results in an error.

func ConvertStringToArch ¶ added in v0.0.5

func ConvertStringToArch(in string) (string, error)

ConvertStringToArch converts a string into a Seccomp comparison arch.

func ConvertStringToOperator ¶ added in v0.0.4

func ConvertStringToOperator(in string) (configs.Operator, error)

ConvertStringToOperator converts a string into a Seccomp comparison operator. Comparison operators use the names they are assigned by Libseccomp's header. Attempting to convert a string that is not a valid operator results in an error.

func InitSeccomp ¶ added in v0.0.4

func InitSeccomp(config *configs.Seccomp) error

Seccomp not supported, do nothing

func IsEnabled ¶ added in v0.0.7

func IsEnabled() bool

IsEnabled returns false, because it is not supported.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL