Giuseppe Scrivano 8292fc0a44 do not set the inheritable capabilities ... The kernel never sets the inheritable capabilities for a process, they are only set by userspace. Emulate the same behavior. Closes: CVE-2022-27649 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com> (cherry picked from commit aafa80918a)		2022-04-12 14:27:41 -04:00
..
kube	Use SplitN(2) when copying env variables	2021-10-19 15:56:35 -04:00
config_linux.go	Add filepath glob support to --security-opt unmask	2021-05-04 14:40:43 -04:00
config_linux_cgo.go	migrate Podman to containers/common/libimage	2021-05-05 11:30:12 +02:00
config_linux_nocgo.go	migrate Podman to containers/common/libimage	2021-05-05 11:30:12 +02:00
config_linux_test.go	Add filepath glob support to --security-opt unmask	2021-05-04 14:40:43 -04:00
container.go	implement init containers in podman	2021-08-04 14:14:36 -05:00
container_create.go	secret: honor custom target for secrets with run	2021-12-06 14:37:46 -05:00
namespaces.go	InfraContainer Rework	2021-08-26 16:05:16 -04:00
oci.go	InfraContainer Rework	2021-08-26 16:05:16 -04:00
pod_create.go	Fix network mode in play kube	2021-12-06 14:21:17 -05:00
ports.go	Merge pull request #11314 from Luap99/expose-ports	2021-08-25 09:29:03 -04:00
security.go	do not set the inheritable capabilities	2022-04-12 14:27:41 -04:00
storage.go	volumes: be more tolerant and fix infinite loop	2021-11-08 10:17:06 +01:00
validate.go	Allow a value of -1 to set unlimited pids limit	2021-10-19 13:55:41 -04:00