capabilites

Documentation

Index

• type Caps
  • func New(capConfig *config.Capabilities) (*Caps, error)
  • func (c *Caps) ApplyBoundingSet() error
  • func (c *Caps) ApplyCaps() error

Types

type Caps

type Caps struct {
	// contains filtered or unexported fields
}

func New

func New(capConfig *config.Capabilities) (*Caps, error)

从已知的配置中创建新的Caps，当前环境下未知的Capability会被忽略并打印警告

func (*Caps) ApplyBoundingSet

func (c *Caps) ApplyBoundingSet() error

ApplyBoundingSet sets the capability bounding set to those specified in the whitelist.

func (*Caps) ApplyCaps

func (c *Caps) ApplyCaps() error

Apply sets all the capabilities for the current process in the config.