capabilities

Documentation

Index

• func CheckRequired(reqCaps []cap.Value) error
• func DropUnrequired(reqCaps []cap.Value) error
• type DropCapabilitiesError
  • func (dropCapErr *DropCapabilitiesError) Error() string
  • func (dropCapErr *DropCapabilitiesError) Is(target error) bool
  • func (dropCapErr *DropCapabilitiesError) Unwrap() error
• type MissingCapabilitiesError
  • func (missCapErr *MissingCapabilitiesError) Error() string
  • func (missCapErr *MissingCapabilitiesError) Is(target error) bool

Functions

func CheckRequired

func CheckRequired(reqCaps []cap.Value) error

CheckRequired check if given capabilities include all required capabilities in the effective set. If the error is of the MissingCapabilitiesError type, it means some capabilities are missing. Other errors might rise because of capabilities extraction failure, or internal errors.

func DropUnrequired

func DropUnrequired(reqCaps []cap.Value) error

DropUnrequired drops all capabilities not required by user from Effective and Permitted set, and all capabilities from the Inheritance set. DropUnrequired requires that all required capabilities are already set or available in permitted set. The function also tries to drop the capabilities bounding set, but it won't work if CAP_SETPCAP is not available.

Types

type DropCapabilitiesError

type DropCapabilitiesError struct {
	Err error
}

func (*DropCapabilitiesError) Error

func (dropCapErr *DropCapabilitiesError) Error() string

func (*DropCapabilitiesError) Is

func (dropCapErr *DropCapabilitiesError) Is(target error) bool

func (*DropCapabilitiesError) Unwrap

func (dropCapErr *DropCapabilitiesError) Unwrap() error

type MissingCapabilitiesError

type MissingCapabilitiesError struct {
	MissingCaps []cap.Value
}

func (*MissingCapabilitiesError) Error

func (missCapErr *MissingCapabilitiesError) Error() string

func (*MissingCapabilitiesError) Is

func (missCapErr *MissingCapabilitiesError) Is(target error) bool