|
@@ -13,7 +13,6 @@ import (
|
|
|
"github.com/dotcloud/docker/daemon/execdriver"
|
|
|
"github.com/dotcloud/docker/daemon/execdriver/native/template"
|
|
|
"github.com/dotcloud/docker/pkg/system"
|
|
|
- utils2 "github.com/dotcloud/docker/utils"
|
|
|
)
|
|
|
|
|
|
func setHostname(hostname string) error {
|
|
@@ -50,18 +49,7 @@ func finalizeNamespace(args *execdriver.InitArgs) error {
|
|
|
return fmt.Errorf("clear keep caps %s", err)
|
|
|
}
|
|
|
|
|
|
- var caps []string
|
|
|
- for _, cap := range container.Capabilities {
|
|
|
- if !utils2.StringsContains(strings.Split(args.CapDrop, " "), cap) {
|
|
|
- caps = append(caps, cap)
|
|
|
- }
|
|
|
- }
|
|
|
-
|
|
|
- for _, cap := range strings.Split(args.CapAdd, " ") {
|
|
|
- if !utils2.StringsContains(caps, cap) {
|
|
|
- caps = append(caps, cap)
|
|
|
- }
|
|
|
- }
|
|
|
+ caps := execdriver.TweakCapabilities(container.Capabilities, strings.Split(args.CapAdd, " "), strings.Split(args.CapDrop, " "))
|
|
|
|
|
|
// drop all other capabilities
|
|
|
if err := capabilities.DropCapabilities(caps); err != nil {
|