Skip to content

Conversation

@zhouhao3
Copy link

@zhouhao3 zhouhao3 commented Dec 6, 2018

Add process-cap-add option to add Linux capabilities to all 5 capability sets.

oci-runtime-tool generate --process-cap-add CAP_FOWNER,CAP_FSETID

Add process-cap-drop option to drop Linux capabilities to all 5 capability sets.

oci-runtime-tool generate --process-cap-drop CAP_FOWNER,CAP_FSETID

@liangchenye
Copy link
Member

It looks good, can you rebase this PR?

Zhou Hao added 2 commits December 14, 2018 13:33
Add process-cap-add option to add Linux capabilities to all 5 capability sets.

```
oci-runtime-tool generate --process-cap-add CAP_FOWNER,CAP_FSETID
```

Signed-off-by: Zhou Hao <[email protected]>
Add process-cap-drop option to drop Linux capabilities to all 5 capability sets.

```
oci-runtime-tool generate --process-cap-drop CAP_FOWNER,CAP_FSETID
```

Signed-off-by: Zhou Hao <[email protected]>
@zhouhao3
Copy link
Author

Rebased, PTAL.

@liangchenye
Copy link
Member

liangchenye commented Dec 14, 2018

LGTM

Approved with PullApprove

@liangchenye liangchenye merged commit f60dccd into opencontainers:master Dec 14, 2018
@zhouhao3 zhouhao3 deleted the add-process-add branch December 14, 2018 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants