2 Commits

Author	SHA1	Message	Date
Daniel J Walsh	bae80a0b66	Clear all caps, except the bounding set, when --user is specified. ... Currently we are giving all caps to users when running with podman run --user, They should get none by default. If the command line includes --cap-add, then we need to run with those capabilties. Similarly we need to drop caps from bounding set, if user specifies --cap-drop Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> Closes: #851 Approved by: mheon	2018-05-31 13:46:08 +00:00
baude	82feafecdd	podman create, start, getattachsocket ... First pass at implement API endpoints for create and start. Signed-off-by: baude <bbaude@redhat.com> Closes: #805 Approved by: baude	2018-05-21 19:26:56 +00:00