Sebastiaan van Stijn
245f2d922a
vendor: github.com/opencontainers/selinux v1.6.0
...
full diff: https://github.com/opencontainers/selinux/compare/v1.5.2...v1.6.0
This also adds a new dependency: github.com/willf/bitset
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-08-31 15:29:05 +02:00
Sebastiaan van Stijn
a8216806ce
vendor: opencontainers/selinux v1.5.1
...
full diff: https://github.com/opencontainers/selinux/compare/v1.3.3...v1.5.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-05-05 20:33:06 +02:00
Sebastiaan van Stijn
fa67cff34b
vendor: update opencontainers/selinux v1.3.3
...
full diff: https://github.com/opencontainers/selinux/compare/v1.3.1...v1.3.3
- go-selinux/SetKeyLabel: fix for RHEL7 kernels
- getSELinuxfs: optimize/simplify using sync.Once
- xattr: use x/sys/unix, simplify
- Use /proc/thread-self if available
- Fix EnforceMode, SetEnforceMode, and SecurityCheckContext
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-02-28 19:19:46 +01:00
Sebastiaan van Stijn
12c7541f1f
vendor: update opencontainers/selinux v1.3.1
...
full diff: 5215b1806f
2020-02-20 14:40:25 +01:00
Akihiro Suda
6d68080907
update runc library to v1.0.0-rc10 (CVE-2019-19921)
...
Notable changes:
* Fix CVE-2019-19921 (Volume mount race condition with shared mounts): https://github.com/opencontainers/runc/pull/2207
* Fix exec FIFO race: https://github.com/opencontainers/runc/pull/2185
* Basic support for cgroup v2. Almost feature-complete, but still missing support for systemd mode in rootless.
See also https://github.com/opencontainers/runc/issues/2209 for the known issues.
Full changes: https://github.com/opencontainers/runc/compare/v1.0.0-rc9...v1.0.0-rc10
Also updates go-selinux: 3a1f366feb...5215b1806fhttps://github.com/containerd/cri/pull/1383#issuecomment-578227009 )
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-01-25 04:06:24 +09:00
Sebastiaan van Stijn
0d453115fe
bump opencontainers/selinux v1.2.2
...
full diff: https://github.com/opencontainers/selinux/compare/v1.2.1...v1.2.2
- opencontainers/selinux#51 Older kernels do not support keyring labeling
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-04-25 18:57:04 -07:00
Sebastiaan van Stijn
606ac478ad
bump opencontainers/selinux v1.2.1
...
full diff: https://github.com/opencontainers/selinux/compare/v1.2...v1.2.1
brings in opencontainers/selinux#49 Ignore attempts to setLabels "" on SELinux disabled systems
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-04-03 21:45:22 +02:00
Sebastiaan van Stijn
f43826c433
bump opencontainers/selinux to v1.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-03-21 10:10:05 +01:00
Sebastiaan van Stijn
31a9c9e791
Update containerd dependencies
...
This updates the containerd dependencies to match
the versions used by the vendored containerd version
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-10-04 15:19:53 +02:00
