Giuseppe Scrivano 2c328a4ac1 specgen: improve heuristic for /sys bind mount ... partially revert 95c45773d7 restrict the cases where /sys is bind mounted from the host. The heuristic doesn't detect all the cases where the bind mount is not necessary, but it is an improvement on the previous version where /sys was always bind mounted for rootless containers unless --net none was specified. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>		2021-01-15 09:10:55 +01:00
..
kube	Merge pull request #8954 from baude/reducebindingsize	2021-01-13 13:29:24 -05:00
config_linux.go	Fix problems reported by staticcheck	2021-01-12 16:11:09 +01:00
config_linux_cgo.go	Remove excessive error wrapping	2020-10-05 15:30:37 -07:00
config_linux_nocgo.go	Switch all references to github.com/containers/libpod -> podman	2020-07-28 08:23:45 -04:00
container.go	Use HTTPProxy settings from containers.conf	2021-01-11 17:35:39 -05:00
container_create.go	container create: do not clear image name	2020-12-07 11:58:10 +01:00
namespaces.go	network: disallow CNI networks with user namespaces	2021-01-13 17:04:51 +01:00
oci.go	specgen: improve heuristic for /sys bind mount	2021-01-15 09:10:55 +01:00
pod_create.go	Add support for slirp network for pods	2020-09-25 21:34:23 -04:00
ports.go	Correct port range logic for port generation	2020-12-08 16:23:14 -05:00
security.go	Containers should not get inheritable caps by default	2021-01-07 05:53:07 -05:00
storage.go	Fix problems reported by staticcheck	2021-01-12 16:11:09 +01:00
validate.go	Fix problems reported by staticcheck	2021-01-12 16:11:09 +01:00