github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-07-19 17:26:28 +00:00
Code Issues Projects Releases Wiki Activity

Use gocapability/capability to get list of all capabilities

Browse Source 
Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
This commit is contained in:
Jorge Prendes 2023-06-06 10:44:48 +01:00
parent f8b62fd0ac
commit 813f2a5bc1
No known key found for this signature in database
GPG Key ID: 10C42CC7E5C685B4
1 changed files with 9 additions and 39 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
src/cmd/linuxkit/moby/config.go
View File

@ -12,6 +12,7 @@ import (
imagespec "github.com/opencontainers/image-spec/specs-go/v1" imagespec "github.com/opencontainers/image-spec/specs-go/v1"
"github.com/opencontainers/runtime-spec/specs-go" "github.com/opencontainers/runtime-spec/specs-go"
log "github.com/sirupsen/logrus" log "github.com/sirupsen/logrus"
"github.com/syndtr/gocapability/capability"
"github.com/xeipuuv/gojsonschema" "github.com/xeipuuv/gojsonschema"
"gopkg.in/yaml.v2" "gopkg.in/yaml.v2"
) )
@ -649,47 +650,16 @@ func assignStringEmpty4(v1, v2, v3, v4 string) string {
return v1 return v1
} }
var allCaps = []string{ func getAllCapabilities() []string {
"CAP_AUDIT_CONTROL", var caps []string
"CAP_AUDIT_READ", for _, cap := range capability.List() {
"CAP_AUDIT_WRITE", caps = append(caps, "CAP_"+strings.ToUpper(cap.String()))
"CAP_BLOCK_SUSPEND", }
"CAP_CHOWN", return caps
"CAP_DAC_OVERRIDE",
"CAP_DAC_READ_SEARCH",
"CAP_FOWNER",
"CAP_FSETID",
"CAP_IPC_LOCK",
"CAP_IPC_OWNER",
"CAP_KILL",
"CAP_LEASE",
"CAP_LINUX_IMMUTABLE",
"CAP_MAC_ADMIN",
"CAP_MAC_OVERRIDE",
"CAP_MKNOD",
"CAP_NET_ADMIN",
"CAP_NET_BIND_SERVICE",
"CAP_NET_BROADCAST",
"CAP_NET_RAW",
"CAP_SETFCAP",
"CAP_SETGID",
"CAP_SETPCAP",
"CAP_SETUID",
"CAP_SYSLOG",
"CAP_SYS_ADMIN",
"CAP_SYS_BOOT",
"CAP_SYS_CHROOT",
"CAP_SYS_MODULE",
"CAP_SYS_NICE",
"CAP_SYS_PACCT",
"CAP_SYS_PTRACE",
"CAP_SYS_RAWIO",
"CAP_SYS_RESOURCE",
"CAP_SYS_TIME",
"CAP_SYS_TTY_CONFIG",
"CAP_WAKE_ALARM",
} }
var allCaps = getAllCapabilities()
func idNumeric(v interface{}, idMap map[string]uint32) (uint32, error) { func idNumeric(v interface{}, idMap map[string]uint32) (uint32, error) {
switch id := v.(type) { switch id := v.(type) {
case nil: case nil: