Affected by GO-2022-0396 and 9 other vulnerabilities

GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

fscommon

package

v1.0.0-rc10 Latest Latest Go to latest Published: Jan 22, 2020 License: Apache-2.0 Imports: 9 Imported by: 0

Details

This section is empty.

View Source

var (
	ErrNotValidFormat = errors.New("line is not a valid key value format")
)

func GetCgroupParamKeyValue(t string) (string, uint64, error)

Parses a cgroup param and returns as name, value

i.e. "io_service_bytes 1234" will return as io_service_bytes, 1234

func GetCgroupParamString(cgroupPath, cgroupFile string) (string, error)

Gets a string value from the specified cgroup file

func GetCgroupParamUint(cgroupPath, cgroupFile string) (uint64, error)

Gets a single uint64 value from the specified cgroup file.

func ParseUint(s string, base, bitSize int) (uint64, error)

Saturates negative values at zero and returns a uint64. Due to kernel bugs, some of the memory cgroup stats can be negative.

func ReadFile(dir, file string) (string, error)

func WriteFile(dir, file, data string) error

This section is empty.