Affected by GO-2022-0390 and 6 other vulnerabilities

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

sockets

package

v1.9.0 Latest Latest Go to latest Published: Nov 3, 2015 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/docker/docker

Links

Documentation ¶

Rendered for

Overview ¶

Package sockets provides helper functions to create and configure Unix or TCP sockets.

Index ¶

func ConfigureTCPTransport(tr *http.Transport, proto, addr string)
func NewTCPSocket(addr string, tlsConfig *tls.Config, activate <-chan struct{}) (net.Listener, error)
func NewUnixSocket(path, group string, activate <-chan struct{}) (net.Listener, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ConfigureTCPTransport ¶ added in v1.8.0

func ConfigureTCPTransport(tr *http.Transport, proto, addr string)

ConfigureTCPTransport configures the specified Transport according to the specified proto and addr. If the proto is unix (using a unix socket to communicate) the compression is disabled.

func NewTCPSocket ¶ added in v1.9.0

func NewTCPSocket(addr string, tlsConfig *tls.Config, activate <-chan struct{}) (net.Listener, error)

NewTCPSocket creates a TCP socket listener with the specified address and and the specified tls configuration. If TLSConfig is set, will encapsulate the TCP listener inside a TLS one. The channel passed is used to activate the listenbuffer when the caller is ready to accept connections.

func NewUnixSocket ¶

func NewUnixSocket(path, group string, activate <-chan struct{}) (net.Listener, error)

NewUnixSocket creates a unix socket with the specified path and group. The channel passed is used to activate the listenbuffer when the caller is ready to accept connections.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL