Sebastiaan van Stijn
|
485cf38d48
oci/caps: limit available capabilities to current environment
|
%!s(int64=3) %!d(string=hai) anos |
Sebastiaan van Stijn
|
58c4c120a8
oci/caps: simplify, and remove types that were not needed
|
%!s(int64=4) %!d(string=hai) anos |
Sebastiaan van Stijn
|
fc3f98848a
oci/caps: improve error message for unsupported capabilities
|
%!s(int64=4) %!d(string=hai) anos |
Sebastiaan van Stijn
|
72b1fb59fe
oci/caps: use map for capabilities to simplify lookup
|
%!s(int64=4) %!d(string=hai) anos |
Sebastiaan van Stijn
|
d786a52364
oci/caps: generate list of all capabilities on "init"
|
%!s(int64=4) %!d(string=hai) anos |
Sebastiaan van Stijn
|
0ec6f7ea23
oci/caps: minor optimization in init
|
%!s(int64=4) %!d(string=hai) anos |
Sebastiaan van Stijn
|
b00b21b93c
oci/caps: rename some vars that conflicted with imports / built-ins
|
%!s(int64=4) %!d(string=hai) anos |
Sebastiaan van Stijn
|
94334153b5
oci/caps: remove hack for RHEL6 kernels
|
%!s(int64=4) %!d(string=hai) anos |
Sebastiaan van Stijn
|
c1c973e81b
Revert "Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE"
|
%!s(int64=4) %!d(string=hai) anos |
Sebastiaan van Stijn
|
a40197328e
oci/caps: remove unused GetCapability() and ValidateCapabilities()
|
%!s(int64=4) %!d(string=hai) anos |
Sebastiaan van Stijn
|
a38b96b8cd
Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE
|
%!s(int64=4) %!d(string=hai) anos |
Brian Goff
|
24f173a003
Replace service "Capabilities" w/ add/drop API
|
%!s(int64=5) %!d(string=hai) anos |
Olli Janatuinen
|
80d7bfd54d
Capabilities refactor
|
%!s(int64=6) %!d(string=hai) anos |
Michael Crosby
|
b940cc5cff
Move caps and device spec utils to `oci` pkg
|
%!s(int64=6) %!d(string=hai) anos |