package policy

import "github.com/Microsoft/hcsshim/internal/guest/policy"

Index ¶

• func DefaultCRIMounts() []oci.Mount
• func DefaultCRIPrivilegedMounts() []oci.Mount
• func ExtendPolicyWithNetworkingMounts(sandboxID string, enforcer securitypolicy.SecurityPolicyEnforcer, spec *oci.Spec) error

Functions ¶

func DefaultCRIMounts ¶

func DefaultCRIMounts() []oci.Mount

DefaultCRIMounts returns default mounts added to linux spec by containerD.

func DefaultCRIPrivilegedMounts ¶

func DefaultCRIPrivilegedMounts() []oci.Mount

DefaultCRIPrivilegedMounts returns a slice of mounts which are added to the linux container spec when a container runs in a privileged mode.

func ExtendPolicyWithNetworkingMounts ¶

func ExtendPolicyWithNetworkingMounts(sandboxID string, enforcer securitypolicy.SecurityPolicyEnforcer, spec *oci.Spec) error

Source Files ¶

default.go doc.go