Andrew G. Morgan 6906b57c72 Fix the Inheritable capability defaults. ...

The Linux kernel never sets the Inheritable capability flag to
anything other than empty. Non-empty values are always exclusively
set by userspace code.

[The kernel stopped defaulting this set of capability values to the
 full set in 2000 after a privilege escalation with Capabilities
 affecting Sendmail and others.]

Signed-off-by: Andrew G. Morgan <morgan@kernel.org>

2022-02-01 13:55:46 -08:00

..

client.go

Licence header added

2018-02-19 10:32:26 +09:00

mounts_freebsd.go

Add ruleset=4 option

2021-05-25 09:17:16 +02:00

mounts.go

Run go fmt with Go 1.17

2021-08-22 09:31:50 +09:00

spec_opts_linux_test.go

Fix the Inheritable capability defaults.

2022-02-01 13:55:46 -08:00

spec_opts_linux.go

oci: implement WithRdt

2022-01-04 09:27:54 +02:00

spec_opts_nonlinux.go

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00

spec_opts_test.go

refactor: move from io/ioutil to io and os package

2021-09-21 09:50:38 +08:00

spec_opts_unix_test.go

Run go fmt with Go 1.17

2021-08-22 09:31:50 +09:00

spec_opts_unix.go

cri: Devices ownership from SecurityContext

2021-08-30 09:30:00 +03:00

spec_opts_windows_test.go

Remove redundant build tags

2021-08-05 22:27:46 -07:00

spec_opts_windows.go

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00

spec_opts.go

Fix the Inheritable capability defaults.

2022-02-01 13:55:46 -08:00

spec_test.go

Fix the Inheritable capability defaults.

2022-02-01 13:55:46 -08:00

spec.go

Fix the Inheritable capability defaults.

2022-02-01 13:55:46 -08:00

utils_unix_go116_test.go

OCI: Mount (accessible) host devices in privileged rootless containers

2021-12-10 12:16:59 +01:00

utils_unix_go117_test.go

OCI: Mount (accessible) host devices in privileged rootless containers

2021-12-10 12:16:59 +01:00

utils_unix_test.go

OCI: Mount (accessible) host devices in privileged rootless containers

2021-12-10 12:16:59 +01:00

utils_unix.go

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00