mirror of https://github.com/containers/podman.git
bae80a0b66
Currently we are giving all caps to users when running with podman run --user, They should get none by default. If the command line includes --cap-add, then we need to run with those capabilties. Similarly we need to drop caps from bounding set, if user specifies --cap-drop Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> Closes: #851 Approved by: mheon |
||
|---|---|---|
| .. | ||
| createconfig.go | ||
| parse.go | ||
| ports.go | ||
| spec.go | ||
| spec_test.go | ||