capabilities

Documentation

Index

• func Initialize(bypass bool) error
• func ListAvailCaps() []string
• func ReqByString(values ...string) ([]cap.Value, error)
• type Capabilities
  • func GetInstance() *Capabilities
  • func (c *Capabilities) BaseRingAdd(values ...cap.Value) error
  • func (c *Capabilities) BaseRingRemove(values ...cap.Value) error
  • func (c *Capabilities) EBPF(cb func() error) error
  • func (c *Capabilities) EBPFRingAdd(values ...cap.Value) error
  • func (c *Capabilities) EBPFRingRemove(values ...cap.Value) error
  • func (c *Capabilities) Full(cb func() error) error
  • func (c *Capabilities) Specific(cb func() error, values ...cap.Value) error
• type RingType

Functions

func Initialize

func Initialize(bypass bool) error

Initialize initializes the "caps" instance (singleton).

func ListAvailCaps

func ListAvailCaps() []string

ListAvailCaps lists available capabilities in the running environment

func ReqByString

func ReqByString(values ...string) ([]cap.Value, error)

Types

type Capabilities

type Capabilities struct {
	// contains filtered or unexported fields
}

func GetInstance

func GetInstance() *Capabilities

GetInstance returns current "caps" instance. It initializes capabilities if needed, bypassing the privilege dropping by default.

func (*Capabilities) BaseRingAdd

func (c *Capabilities) BaseRingAdd(values ...cap.Value) error

func (*Capabilities) BaseRingRemove

func (c *Capabilities) BaseRingRemove(values ...cap.Value) error

func (*Capabilities) EBPF

func (c *Capabilities) EBPF(cb func() error) error

func (*Capabilities) EBPFRingAdd

func (c *Capabilities) EBPFRingAdd(values ...cap.Value) error

func (*Capabilities) EBPFRingRemove

func (c *Capabilities) EBPFRingRemove(values ...cap.Value) error

func (*Capabilities) Full

func (c *Capabilities) Full(cb func() error) error

func (*Capabilities) Specific

func (c *Capabilities) Specific(cb func() error, values ...cap.Value) error

type RingType

type RingType int

const (
	Full     RingType = iota // All capabilties are effective
	EBPF                     // eBPF needed capabilities are effective
	Specific                 // Specific requested capabilities are effective
	Base                     // Capabilities that are always effective
)