Commit Graph

4 Commits

Author SHA1 Message Date
Giuseppe Scrivano 389df0ae1f capabilities: add new method BoundingSet()
add a new public function to retrieve all the capabilities in the
current bounding set.

This is useful for Podman to use only these capabilities when running
with --privileged as it can break running in a container where the
available capabilities can be a subset of the ones available in the
kernel.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2021-03-18 20:30:40 +01:00
Daniel J Walsh bfada097cc Export NormalizeCapabilities function
We need access to this function in Podman to translate
user entry into standardized format.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-08-10 08:47:58 -04:00
Daniel J Walsh e0c60444e2 Fix capability testing
Also normalize the base list of capabilities.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-03-27 06:54:58 -04:00
Daniel J Walsh badb4562d3 Add capabilities testing as well
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-03-23 09:17:38 -04:00