...

Package policy

import "github.com/Microsoft/hcsshim/internal/guest/policy"
Overview
Index

Overview ▾

func DefaultCRIMounts

func DefaultCRIMounts() []oci.Mount

DefaultCRIMounts returns default mounts added to linux spec by containerD.

func DefaultCRIPrivilegedMounts

func DefaultCRIPrivilegedMounts() []oci.Mount

DefaultCRIPrivilegedMounts returns a slice of mounts which are added to the linux container spec when a container runs in a privileged mode.

func ExtendPolicyWithNetworkingMounts

func ExtendPolicyWithNetworkingMounts(sandboxID string, enforcer securitypolicy.SecurityPolicyEnforcer, spec *oci.Spec) error