Daniel J Walsh bae80a0b66 Clear all caps, except the bounding set, when --user is specified. ... Currently we are giving all caps to users when running with podman run --user, They should get none by default. If the command line includes --cap-add, then we need to run with those capabilties. Similarly we need to drop caps from bounding set, if user specifies --cap-drop Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> Closes: #851 Approved by: mheon		2018-05-31 13:46:08 +00:00
..
createconfig.go	podman create, start, getattachsocket	2018-05-21 19:26:56 +00:00
parse.go	podman create, start, getattachsocket	2018-05-21 19:26:56 +00:00
ports.go	Spell check strings and comments	2018-05-25 08:45:15 +00:00
spec.go	Clear all caps, except the bounding set, when --user is specified.	2018-05-31 13:46:08 +00:00
spec_test.go	podman create, start, getattachsocket	2018-05-21 19:26:56 +00:00