Aleksa Sarai 47ab0b1e3b apparmor: use safe procfs API for labels ...

EnsureProcHandle only protects us against a tmpfs mount, but the risk of
a procfs path being used (such as /proc/self/sched) has been known for a
while. Now that filepath-securejoin has a reasonably safe procfs API,
switch to it.

Fixes: GHSA-cgrx-mc8f-2prm CVE-2025-52881
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

2025-10-16 11:27:52 +11:00

..

apparmor_linux.go

apparmor: use safe procfs API for labels

2025-10-16 11:27:52 +11:00

apparmor_unsupported.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

apparmor.go

libcontainer/apparmor: split api (exported) from implementation

2021-06-02 17:35:55 +02:00