Andrew G. Morgan 6906b57c72 Fix the Inheritable capability defaults. ...

The Linux kernel never sets the Inheritable capability flag to
anything other than empty. Non-empty values are always exclusively
set by userspace code.

[The kernel stopped defaulting this set of capability values to the
 full set in 2000 after a privilege escalation with Capabilities
 affecting Sendmail and others.]

Signed-off-by: Andrew G. Morgan <morgan@kernel.org>

2022-02-01 13:55:46 -08:00

..

apparmor

refactor: move from io/ioutil to io and os package

2021-09-21 09:50:38 +08:00

atomic

use containerd/project header test

2020-04-22 19:35:37 -05:00

cap

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00

cri

Fix the Inheritable capability defaults.

2022-02-01 13:55:46 -08:00

dialer

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00

ioutil

refactor: move from io/ioutil to io and os package

2021-09-21 09:50:38 +08:00

netns

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00

oom

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00

os

refactor: move from io/ioutil to io and os package

2021-09-21 09:50:38 +08:00

process

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00

progress

Fix linter errors

2019-07-14 20:49:40 -07:00

registrar

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00

runtimeoptions/v1

Introduce a new go module - containerd/api for use in standalone clients

2021-07-27 07:34:59 -04:00

schedcore

add runc shim support for sched core

2021-10-08 16:18:09 +00:00

seccomp

Run go fmt with Go 1.17

2021-08-22 09:31:50 +09:00

seed

Run go fmt with Go 1.17

2021-08-22 09:31:50 +09:00

seutil

seutil: Fix setting the "container_kvm_t" label

2021-12-14 00:09:17 +01:00

shutdown

Split runc shim into plugin components

2021-11-15 20:16:45 -08:00

stdio

Add logging binary support when terminal is true

2020-08-25 17:28:29 -07:00

testutil

refactor: move from io/ioutil to io and os package

2021-09-21 09:50:38 +08:00

timeout

feat: use rwmutex instead

2021-11-16 11:06:40 +08:00

ttrpcutil

feat: replace github.com/pkg/errors to errors

2022-01-07 10:27:03 +08:00

userns

Run go fmt with Go 1.17

2021-08-22 09:31:50 +09:00