capabilities

Documentation

Index

• Variables
• func Drop(uid int, gid int) error
• func DropAllCapabilities() error
• func DropNetBind() error
• func FixLinuxPrivileges(uid, gid string) error
• func GetCaps() string
• func KeepCaps() error
• func NeedFixLinuxPrivileges(uid, gid string) (bool, error)
• func NoNewPriv() error
• func Predrop() (bool, error)
• func Setgid(gid int)
• func Setuid(uid int)
• type CapabilitiesQuery
  • func NewCapabilitiesQuery() (*CapabilitiesQuery, error)
  • func (c *CapabilitiesQuery) CanChangeUid() bool
  • func (c *CapabilitiesQuery) CanModifySecurebits() bool
  • func (c *CapabilitiesQuery) NeedDrop() bool
  • func (c *CapabilitiesQuery) NeedMore() bool

Variables

var CAPS_TO_KEEP []capability.Cap

var CapabilitiesSupported bool = true

Functions

func Drop

func Drop(uid int, gid int) error

func DropAllCapabilities

func DropAllCapabilities() error

func DropNetBind

func DropNetBind() error

func FixLinuxPrivileges

func FixLinuxPrivileges(uid, gid string) error

func GetCaps

func GetCaps() string

func KeepCaps

func KeepCaps() error

func NeedFixLinuxPrivileges

func NeedFixLinuxPrivileges(uid, gid string) (bool, error)

func NoNewPriv

func NoNewPriv() error

func Predrop

func Predrop() (bool, error)

func Setgid

func Setgid(gid int)

func Setuid

func Setuid(uid int)

Types

type CapabilitiesQuery

type CapabilitiesQuery struct {
	// contains filtered or unexported fields
}

func NewCapabilitiesQuery

func NewCapabilitiesQuery() (*CapabilitiesQuery, error)

func (*CapabilitiesQuery) CanChangeUid

func (c *CapabilitiesQuery) CanChangeUid() bool

func (*CapabilitiesQuery) CanModifySecurebits

func (c *CapabilitiesQuery) CanModifySecurebits() bool

func (*CapabilitiesQuery) NeedDrop

func (c *CapabilitiesQuery) NeedDrop() bool

func (*CapabilitiesQuery) NeedMore

func (c *CapabilitiesQuery) NeedMore() bool