Victor Marmol 48bd5989f0 Change libcontainer to drop all capabilities by default. Only keeps ...

those that were specified in the config. This commit also explicitly
adds a set of capabilities that we were silently not dropping and were
assumed by the tests.

Docker-DCO-1.1-Signed-off-by: Victor Marmol <vmarmol@google.com> (github: vmarmol)
Upstream-commit: 9d6875d19d3926faf6287487234ad0b2f1310e9d
Component: engine

2014-05-16 00:57:58 +00:00

..

capabilities

Change libcontainer to drop all capabilities by default. Only keeps

2014-05-16 00:57:58 +00:00

restrict

Update restrict.Restrict to both show the error message when failing to mount /dev/null over /proc/kcore, and to ignore "not exists" errors while doing so (for when CONFIG_PROC_KCORE=n in the kernel)

2014-05-08 01:03:45 -06:00