spiegel_podman/pkg/specgen
Giuseppe Scrivano 445b6cc2e7
capabilities: always set ambient and inheritable
change capabilities handling to reflect what docker does.

Bounding: set to caplist
Inheritable: set to caplist
Effective: if uid != 0 then clear; else set to caplist
Permitted: if uid != 0 then clear; else set to caplist
Ambient: clear

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
(cherry picked from commit 703381b4a2)
2020-10-02 17:20:20 +02:00
..
generate capabilities: always set ambient and inheritable 2020-10-02 17:20:20 +02:00
config_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_validate.go error when adding container to pod with network information 2020-08-21 09:21:15 -05:00
namespaces.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
pod_validate.go Fix podman pod create --infra-command and --infra-image 2020-09-16 07:42:19 -04:00
podspecgen.go Fix container and pod create commands for remote create 2020-07-10 11:22:23 -04:00
specgen.go run/create: record raw image 2020-09-15 13:33:22 +02:00