Affected by GO-2022-0617 and 9 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2025-3465: Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes

GO-2025-3521: Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes

GO-2025-3522: Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes

GO-2025-3547: Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes

procfs

package

v1.27.1 Latest Latest Go to latest Published: Apr 14, 2023 License: Apache-2.0 Imports: 13 Imported by: 285

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kubernetes/kubernetes

Links

Open Source Insights

Documentation ¶

Rendered for

Overview ¶

Package procfs implements utility functions relating to the /proc mount.

Index ¶

func PKill(name string, sig syscall.Signal) error
func PidOf(name string) ([]int, error)
type FakeProcFS
- func (fakePfs *FakeProcFS) GetFullContainerName(pid int) (string, error)
type ProcFS
- func (pfs *ProcFS) GetFullContainerName(pid int) (string, error)
type ProcFSInterface

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func PKill ¶ added in v1.4.0

func PKill(name string, sig syscall.Signal) error

PKill finds process(es) using a regular expression and send a specified signal to each process.

func PidOf ¶ added in v1.4.0

func PidOf(name string) ([]int, error)

PidOf finds process(es) with a specified name (regexp match) and return their pid(s).

Types ¶

type FakeProcFS ¶ added in v1.2.0

type FakeProcFS struct{}

func (*FakeProcFS) GetFullContainerName ¶ added in v1.2.0

func (fakePfs *FakeProcFS) GetFullContainerName(pid int) (string, error)

GetFullContainerName gets the container name given the root process id of the container. E.g. if the devices cgroup for the container is stored in /sys/fs/cgroup/devices/docker/nginx, return docker/nginx. Assumes that the process is part of exactly one cgroup hierarchy.

type ProcFS ¶ added in v1.2.0

type ProcFS struct{}

ProcFS provides a helper for getting container name via pid.

func (*ProcFS) GetFullContainerName ¶ added in v1.2.0

func (pfs *ProcFS) GetFullContainerName(pid int) (string, error)

GetFullContainerName gets the container name given the root process id of the container. E.g. if the devices cgroup for the container is stored in /sys/fs/cgroup/devices/docker/nginx, return docker/nginx. Assumes that the process is part of exactly one cgroup hierarchy.

type ProcFSInterface ¶ added in v1.2.0

type ProcFSInterface interface {
	// GetFullContainerName gets the container name given the root process id of the container.
	GetFullContainerName(pid int) (string, error)
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL