mirror of
				https://github.com/optim-enterprises-bv/kubernetes.git
				synced 2025-11-04 04:08:16 +00:00 
			
		
		
		
	vendor: bump runc to 1.0.1
The commands used were (roughly): hack/pin-dependency.sh github.com/opencontainers/runc v1.0.1 hack/lint-dependencies.sh # Follow its recommendations. hack/pin-dependency.sh github.com/cilium/ebpf v0.6.2 hack/pin-dependency.sh github.com/opencontainers/selinux v1.8.2 hack/pin-dependency.sh github.com/sirupsen/logrus v1.8.1 # Recheck. hack/lint-dependencies.sh GO111MODULE=on go mod edit -dropreplace github.com/willf/bitset hack/update-vendor.sh # Recheck. hack/lint-dependencies.sh hack/update-internal-modules.sh # Recheck. hack/lint-dependencies.sh Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
This commit is contained in:
		
							
								
								
									
										4
									
								
								vendor/github.com/opencontainers/runc/libcontainer/setns_init_linux.go
									
									
									
										generated
									
									
										vendored
									
									
								
							
							
						
						
									
										4
									
								
								vendor/github.com/opencontainers/runc/libcontainer/setns_init_linux.go
									
									
									
										generated
									
									
										vendored
									
									
								
							@@ -37,7 +37,7 @@ func (l *linuxSetnsInit) Init() error {
 | 
			
		||||
		if err := selinux.SetKeyLabel(l.config.ProcessLabel); err != nil {
 | 
			
		||||
			return err
 | 
			
		||||
		}
 | 
			
		||||
		defer selinux.SetKeyLabel("")
 | 
			
		||||
		defer selinux.SetKeyLabel("") //nolint: errcheck
 | 
			
		||||
		// Do not inherit the parent's session keyring.
 | 
			
		||||
		if _, err := keys.JoinSessionKeyring(l.getSessionRingName()); err != nil {
 | 
			
		||||
			// Same justification as in standart_init_linux.go as to why we
 | 
			
		||||
@@ -65,7 +65,7 @@ func (l *linuxSetnsInit) Init() error {
 | 
			
		||||
	if err := selinux.SetExecLabel(l.config.ProcessLabel); err != nil {
 | 
			
		||||
		return err
 | 
			
		||||
	}
 | 
			
		||||
	defer selinux.SetExecLabel("")
 | 
			
		||||
	defer selinux.SetExecLabel("") //nolint: errcheck
 | 
			
		||||
	// Without NoNewPrivileges seccomp is a privileged operation, so we need to
 | 
			
		||||
	// do this before dropping capabilities; otherwise do it as late as possible
 | 
			
		||||
	// just before execve so as few syscalls take place after it as possible.
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user