capabilities

Documentation

Index

• type Caps
  • func New(capConfig *configs.Capabilities) (*Caps, error)
  • func (c *Caps) ApplyBoundingSet() error
  • func (c *Caps) ApplyCaps() error

Types

type Caps

type Caps struct {
	// contains filtered or unexported fields
}

Caps holds the capabilities for a container.

func New

func New(capConfig *configs.Capabilities) (*Caps, error)

New creates a new Caps from the given Capabilities config. Unknown Capabilities or Capabilities that are unavailable in the current environment are ignored, printing a warning instead.

func (*Caps) ApplyBoundingSet

func (c *Caps) ApplyBoundingSet() error

ApplyBoundingSet sets the capability bounding set to those specified in the whitelist.

func (*Caps) ApplyCaps

func (c *Caps) ApplyCaps() error

Apply sets all the capabilities for the current process in the config.