Top 0.6% dependent packages on proxy.golang.org
Top 0.5% dependent repos on proxy.golang.org
Top 0.4% docker downloads on proxy.golang.org
proxy.golang.org : kernel.org/pub/linux/libs/security/libcap/cap
Package cap provides all the Linux Capabilities userspace library API bindings in native Go. Capabilities are a feature of the Linux kernel that allow fine grain permissions to perform privileged operations. Privileged operations are required to do irregular system level operations from code. You can read more about how Capabilities are intended to work in this Linux Symposium paper. This package supports native Go bindings for all the features described in that paper as well as supporting subsequent changes to the kernel for other styles of inheritable Capability. Some simple things you can do with this package are: This `"cap"` package operates with POSIX semantics for security state. That is all OS threads are kept in sync at all times. The package `"kernel.org/pub/linux/libs/security/libcap/psx"` is used to implement POSIX semantics system calls that manipulate thread state uniformly over the whole Go (and any CGo linked) process runtime. Note, if the Go runtime syscall interface contains the Linux variant `syscall.AllThreadsSyscall()` API (it debuted in go1.16 see Go bug 1435 for its history) then the "libcap/psx" package will use that to invoke Capability setting system calls in pure Go binaries. With such an enhanced Go runtime, to force this behavior, use the CGO_ENABLED=0 environment variable. POSIX semantics are more secure than trying to manage privilege at a thread level when those threads share a common memory image as they do under Linux: it is trivial to exploit a vulnerability in one thread of a process to cause execution on any another thread. So, any imbalance in security state, in such cases will readily create an opportunity for a privilege escalation vulnerability. POSIX semantics also work well with Go, which deliberately tries to insulate the user from worrying about the number of OS threads that are actually running in their program. Indeed, Go can efficiently launch and manage tens of thousands of concurrent goroutines without bogging the program or wider system down. It does this by aggressively migrating idle threads to make progress on unblocked goroutines. So, inconsistent security state across OS threads can also lead to program misbehavior. The only exception to this process-wide common security state is the cap.Launcher related functionality. This briefly locks an OS thread to a goroutine in order to launch another executable - the robust implementation of this kind of support is quite subtle, so please read its documentation carefully, if you find that you need it. See the Fully Capable site for recent updates, some more complete walk-through examples of ways of using 'cap.Set's etc and information on how to file bugs. Copyright (c) 2019-21 Andrew G. Morgan <[email protected]> The cap and psx packages are licensed with a (you choose) BSD 3-clause or GPL2. See LICENSE file for details.
Registry
- Homepage
- Documentation
- JSON
purl: pkg:golang/kernel.org/pub/linux/libs/security/libcap/cap
License: GPL-2.0
Latest release: 21 days ago
First release: almost 5 years ago
Namespace: kernel.org/pub/linux/libs/security/libcap
Dependent packages: 79
Dependent repositories: 151
Docker dependents: 258
Docker downloads: 303,504,480
Last synced: about 1 hour ago
github.phpd.cn/moby/buildkit v0.14.1
70 versions - Latest release: 11 months agogithub.com/cloudflare/ebpf_exporter/v2 v2.4.2
Prometheus exporter for custom eBPF metrics10 versions - Latest release: 11 months ago - 1,558 stars on GitHub
github.com/milas/rock5-talos v1.7.2
Friendly fork of Talos Linux for the Radxa Rock 5 SBCs299 versions - Latest release: 12 months ago - 13 stars on GitHub
github.com/canalguada/nicy v0.2.2
Copyright © 2021 David Guadalupe <[email protected]> This program is free software: you ...7 versions - Latest release: about 1 year ago - 1 stars on GitHub
github.com/andrewrynhard/talos v1.7.0
A minimal, immutable, and secure Kubernetes linux distribution289 versions - Latest release: about 1 year ago - 1 stars on GitHub
github.com/psurana-flextrade/beats/v7 v7.17.20
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash77 versions - Latest release: about 1 year ago - 0 stars on GitHub
github.com/qdm12/ss-server v0.6.0 💰
Shadowsocks server to use with Docker and to integrate in other Go programs8 versions - Latest release: about 1 year ago - 1 dependent package - 7 dependent repositories - 14 stars on GitHub
github.com/maheshwarigithub/moby-buildkit v0.13.1
65 versions - Latest release: about 1 year ago - 0 stars on GitHubgithub.com/pl4nty/talos v1.6.6-soquartzcm4
Talos Linux is a modern Linux distribution built for Kubernetes.5 versions - Latest release: about 1 year ago - 0 stars on GitHub
github.skymusic.top/grafana/synthetic-monitoring-agent v0.21.0
93 versions - Latest release: about 1 year agogithub.com/Mirantis/buildkit v0.12.5
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit63 versions - Latest release: over 1 year ago - 0 stars on GitHub
github.com/aepifanov/buildkit v0.12.5
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit59 versions - Latest release: over 1 year ago - 0 stars on GitHub
github.com/mirantis/buildkit v0.12.5
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit63 versions - Latest release: over 1 year ago - 0 stars on GitHub
github.com/apache/doris/extension/beats v0.0.0-20240125024808-aa3ff1ebf72c
Apache Doris is an easy-to-use, high performance and unified analytics database.448 versions - Latest release: over 1 year ago - 9,314 stars on GitHub
github.com/khulnasoft/devkit v0.12.4
1 version - Latest release: over 1 year ago - 0 stars on GitHubgithub.com/thetherington/beats/v7 v7.8.8
1 version - Latest release: over 1 year ago - 0 stars on GitHubgithub.com/thetherington/beats v0.0.2
2 versions - Latest release: over 1 year ago - 0 stars on GitHubgate.computer v0.0.0-20231230212751-d4938e7db250
Benign remote code execution14 versions - Latest release: over 1 year ago - 1 dependent package - 111 stars on GitHub
github.com/pelicanplatform/pelican v1.0.5
The Pelican command line tool98 versions - Latest release: over 1 year ago - 0 stars on GitHub
github.com/PelicanPlatform/pelican v1.0.5
The Pelican Platform for creating data federations4 versions - Latest release: over 1 year ago - 1 stars on GitHub
github.com/khulnasoft/shipyard v1.1.10 💰
2 versions - Latest release: over 1 year ago - 1 dependent package - 0 stars on GitHubgithub.com/aws/aws-app-mesh-agent/agent v0.0.0-20231212190042-0f319695e385
10 versions - Latest release: over 1 year agogithub.com/khulnasoft-labs/tracker v0.19.0
7 versions - Latest release: over 1 year ago - 0 stars on GitHubgithub.com/khulnasoft-lab/tracker v0.19.0
7 versions - Latest release: over 1 year ago - 0 stars on GitHubgithub.com/dzacball/synthetic-monitoring-agent v0.0.0-20231129132007-05b72f97ae57
Synthetic Monitoring Agent4 versions - Latest release: over 1 year ago - 0 stars on GitHub
github.com/crossplane/function-runtime-oci v0.0.0-20231113155554-3d2dcd121ffc
A Composition Function runtime that wraps an OCI container5 versions - Latest release: over 1 year ago - 1 stars on GitHub
github.com/joshuar/gokbd v0.3.1
A go library to manipulate keyboards using libevdev7 versions - Latest release: over 1 year ago - 1 dependent package - 1 dependent repositories - 2 stars on GitHub
github.com/thoppe-dwarakanath/beats/v7 v7.17.3
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash25 versions - Latest release: over 1 year ago - 0 stars on GitHub
github.com/preminger/buildkit v0.12.3
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit56 versions - Latest release: over 1 year ago - 0 stars on GitHub
github.com/orestisfl/beats/v8 v8.10.3
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash42 versions - Latest release: over 1 year ago - 0 stars on GitHub
github.com/nirmata/buildkit v0.12.3
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit1 version - Latest release: over 1 year ago - 0 stars on GitHub
github.com/AcidFlow/buildkit v0.0.0-20231010193348-2745715fca23
1 version - Latest release: over 1 year agogithub.com/cookbook-md/buildkit v0.12.2
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit1 version - Latest release: over 1 year ago - 0 stars on GitHub
github.com/gridgentoo/crossplane v1.13.2
109 versions - Latest release: over 1 year ago - 0 stars on GitHubgithub.com/josedonizetti/tracee v0.16.2
Linux Runtime Security and Forensics using eBPF48 versions - Latest release: almost 2 years ago - 0 stars on GitHub
github.com/jeniawhite/beats/v7 v7.26.4
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash59 versions - Latest release: almost 2 years ago - 0 stars on GitHub
github.com/qshuai/beats/v7 v7.17.12
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash68 versions - Latest release: almost 2 years ago - 1 stars on GitHub
git.destrealm.org/go/capstan v0.0.0-20230710205928-2262de783bff
3 versions - Latest release: almost 2 years ago - 1 dependent packagegithub.com/nextlinux/tracee v0.0.0-20230527010910-d4ca6f93c448
5 versions - Latest release: almost 2 years ago - 0 stars on GitHubgithub.com/phisco/crossplane v1.11.2
Cloud Native Control Planes96 versions - Latest release: about 2 years ago - 1 stars on GitHub
github.com/Gui774ume/krie v0.0.0-20230307101709-d7a781df1d10
Linux Kernel Runtime Integrity with eBPF2 versions - Latest release: about 2 years ago - 151 stars on GitHub
github.com/bottlerocket-os/hotdog v1.0.6
Hotdog is a set of OCI hooks used to inject the Log4j Hot Patch into containers.7 versions - Latest release: about 2 years ago - 41 stars on GitHub
github.com/danielpacak/tracee v0.11.0
Linux Runtime Security and Forensics using eBPF35 versions - Latest release: over 2 years ago - 0 stars on GitHub
github.com/stv0g/gont v1.6.4 💰
A testing framework for distributed Go applications29 versions - Latest release: over 2 years ago - 5 dependent packages - 1 dependent repositories - 24 stars on GitHub
github.com/cunicu/gont v1.6.4
A Go testing framework for distributed applications29 versions - Latest release: over 2 years ago - 82 stars on GitHub
gate.computer/wag/testsuite v0.0.0-20221214044437-83225debed4f
Module testsuite uses Gate runtime to implement tests which need to execute WebAssembly code. Ga...2 versions - Latest release: over 2 years ago
github.com/T0kii/beats/v7 v7.0.0-20221127105800-4300d46a2677
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash1 version - Latest release: over 2 years ago - 0 stars on GitHub
github.com/kestrelcjx/beats/v7 v7.15.3
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash66 versions - Latest release: over 2 years ago - 0 stars on GitHub
github.com/serinalice/beats/v7 v7.17.6
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash1 version - Latest release: over 2 years ago - 0 stars on GitHub
github.com/Serinalice/beats/v7 v7.17.6
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash1 version - Latest release: over 2 years ago - 0 stars on GitHub
github.com/eyalkraft/beats/v7 v7.0.0-testv2
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash1 version - Latest release: over 2 years ago - 0 stars on GitHub
git.sr.ht/~lofi/lib v0.0.16
12 versions - Latest release: over 2 years ago - 2 dependent packages - 2 dependent repositoriesgithub.com/zebrium/beats/v7 v7.17.5
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash60 versions - Latest release: almost 3 years ago - 0 stars on GitHub
gopkg.in/elastic/beats.v7 v7.17.5 removed
60 versions - Latest release: almost 3 years agogithub.com/j-lgs/terraform-provider-arplookup v0.3.1
A Terraform provider that contains a datasource which looks up an IP address in a network given a...6 versions - Latest release: almost 3 years ago - 2 stars on GitHub
github.com/k0ffee/beats/v7 v7.17.3
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash58 versions - Latest release: about 3 years ago - 0 stars on GitHub
github.com/fufuok/beats-http-output v0.0.2
🐠 Beats (filebeat, metricbeat ...) http output plugin2 versions - Latest release: about 3 years ago - 4 stars on GitHub
github.com/build-security/beats/v7 v7.19.0
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash50 versions - Latest release: about 3 years ago - 2 stars on GitHub
github.com/1o-fyi/lofi v0.1.0
1o.fyi cli2 versions - Latest release: about 3 years ago - 1 stars on GitHub
github.com/cloudflare/tubular v0.0.0-20220223104850-7aa4b529f8c5
BSD socket API on steroids1 version - Latest release: about 3 years ago - 200 stars on GitHub
github.com/utkuozdemir/talos v0.14.1
189 versions - Latest release: over 3 years agogithub.com/asalih/beats/v7 v7.16.2
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash53 versions - Latest release: over 3 years ago - 0 stars on GitHub
git.sr.ht/~johns/lofi v0.0.0-20211106020931-943f80976f43
1 version - Latest release: over 3 years agogithub.com/frezbo/talos v0.13.2
Talos is a modern OS for Kubernetes.178 versions - Latest release: over 3 years ago - 0 stars on GitHub
github.com/kayrus/gof5 v0.1.4
Open Source F5 BIG-IP VPN client for Linux, MacOS, FreeBSD and Windows15 versions - Latest release: over 3 years ago - 104 stars on GitHub
github.com/liorokman/gof5 v0.1.4
Open Source F5 BIG-IP VPN client for Linux, MacOS, FreeBSD and Windows15 versions - Latest release: over 3 years ago - 0 stars on GitHub
github.com/ca-std/lib v0.4.12
36 versions - Latest release: over 3 years ago - 2 dependent repositoriesgithub.com/aojea/netkat v0.1.1
netcat using netstack userspace library and eBPF2 versions - Latest release: almost 4 years ago - 126 stars on GitHub
github.com/ahmetozer/iptables-ddns v0.0.0-20210427003209-1a2c5c97a689
Using domain name on IPtables. Keep updated firewall rules from dynamic DNS (DDNS).1 version - Latest release: about 4 years ago - 3 stars on GitHub
Check this option to include packages that no longer depend on this package in their latest version but previously did.