capabilities

Documentation

Index

• Variables
• func CheckRequired(caps capability.Capabilities, reqCaps []capability.Cap) error
• func DropUnrequired(selfCaps capability.Capabilities, reqCaps []capability.Cap) error
• func Self() (capability.Capabilities, error)

Variables

var (
	// NewPid2 is not defined on an interface
	// therefore it must be patched in for testability
	NewPid2 = capability.NewPid2
)

Functions

func CheckRequired

func CheckRequired(caps capability.Capabilities, reqCaps []capability.Cap) error

func DropUnrequired

func DropUnrequired(selfCaps capability.Capabilities, reqCaps []capability.Cap) error

DropUnrequired requires that all capabilities are already set or available in permitted set. The function also tries to drop the capabilities bounding set, but it won't work if CAP_SETPCAP is not available.

func Self

func Self() (capability.Capabilities, error)