fsgofer

package
v0.0.0-...-522126a Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 23, 2019 License: Apache-2.0 Imports: 17 Imported by: 0

Documentation

Overview

Package fsgofer implements p9.File giving access to local files using a simple mapping from a path prefix that is added to the path requested by the sandbox. Ex:

prefix: "/docker/imgs/alpine"
app path: /bin/ls => /docker/imgs/alpine/bin/ls

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func ControlSocketAddr

func ControlSocketAddr(id string) string

ControlSocketAddr generates an abstract unix socket name for the given id.

func NewAttachPoint

func NewAttachPoint(prefix string, c Config) (p9.Attacher, error)

NewAttachPoint creates a new attacher that gives local file access to all files under 'prefix'. 'prefix' must be an absolute path.

func OpenProcSelfFD

func OpenProcSelfFD() error

OpenProcSelfFD opens the /proc/self/fd directory, which will be used to reopen file descriptors.

Types

type Config

type Config struct {
	// ROMount is set to true if this is a readonly mount.
	ROMount bool

	// PanicOnWrite panics on attempts to write to RO mounts.
	PanicOnWrite bool

	// HostUDS signals whether the gofer can mount a host's UDS.
	HostUDS bool
}

Config sets configuration options for each attach point.

Directories

Path Synopsis
Package filter defines all syscalls the gofer is allowed to make, and installs seccomp filters to prevent prohibited syscalls in case it's compromised.
Package filter defines all syscalls the gofer is allowed to make, and installs seccomp filters to prevent prohibited syscalls in case it's compromised.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL