Giuseppe Scrivano b8514ca6f3 namespaces: by default create cgroupns on cgroups v2 ... change the default on cgroups v2 and create a new cgroup namespace. When a cgroup namespace is used, processes inside the namespace are only able to see cgroup paths relative to the cgroup namespace root and not have full visibility on all the cgroups present on the system. The previous behaviour is maintained on a cgroups v1 host, where a cgroup namespace is not created by default. Closes: https://github.com/containers/libpod/issues/4363 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>		2019-11-05 17:29:01 +01:00
..
config_linux.go	spec: provide custom implementation for getDevices	2019-09-02 13:27:47 +02:00
config_linux_cgo.go	seccomp: use github.com/seccomp/containers-golang	2019-10-30 11:43:29 +01:00
config_linux_nocgo.go	spec: move cgo stuff to their own file	2019-07-02 16:41:03 +02:00
config_unsupported.go	Add darwin support for remote-client	2019-01-11 11:30:28 -06:00
containerconfig.go	remove libpod from main	2019-06-25 13:51:24 -05:00
createconfig.go	bump containers/image to v5.0.0, buildah to v1.11.4	2019-10-29 13:35:18 -04:00
parse.go	golangci-lint round #3	2019-07-21 14:22:39 -05:00
ports.go	Spell check strings and comments	2018-05-25 08:45:15 +00:00
spec.go	namespaces: by default create cgroupns on cgroups v2	2019-11-05 17:29:01 +01:00
spec_test.go	Check for rootless before checking cgroups version in spec_test.	2019-09-15 21:28:13 +03:00
storage.go	Image volumes should not be mounted noexec	2019-10-23 12:09:22 -04:00
storage_test.go	Use EqualValues instead of reflect equality	2019-05-01 10:19:05 -04:00