Ophestra bad66facbc container: improve capability handling ...

This cleans up preserving caps for expansion and correctly sets privileged caps.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2026-05-07 14:27:28 +09:00

..

seccomp

ext: integer limit values

2026-03-17 14:09:38 +09:00

std

ext: isolate from container/std

2026-03-17 13:39:26 +09:00

autoetc_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

autoetc.go

fhs: move from container

2026-03-17 15:56:36 +09:00

autoroot_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

autoroot.go

fhs: move from container

2026-03-17 15:56:36 +09:00

capability_test.go

treewide: parallel tests

2025-10-13 04:38:48 +09:00

capability.go

ext: move syscall wrappers from container

2026-03-17 15:48:40 +09:00

container_test.go

container: improve capability handling

2026-05-07 14:27:28 +09:00

container.go

container: optionally suppress init verbosity

2026-05-05 19:59:44 +09:00

dispatcher_test.go

container/initoverlay: configure via fsconfig

2026-05-04 02:29:56 +09:00

dispatcher.go

container/initoverlay: configure via fsconfig

2026-05-04 02:29:56 +09:00

errors_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

errors.go

container: reject strings larger than a page

2026-05-03 17:30:25 +09:00

init_test.go

container: improve capability handling

2026-05-07 14:27:28 +09:00

init.go

container: improve capability handling

2026-05-07 14:27:28 +09:00

initbind_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

initbind.go

check: move from container

2026-03-17 15:39:03 +09:00

initdaemon_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

initdaemon.go

fhs: move from container

2026-03-17 15:56:36 +09:00

initdev_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

initdev.go

all: use filepath

2026-03-30 18:24:53 +09:00

initmkdir_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

initmkdir.go

check: move from container

2026-03-17 15:39:03 +09:00

initoverlay_test.go

container/initoverlay: configure via fsconfig

2026-05-04 02:29:56 +09:00

initoverlay.go

container/initoverlay: configure via fsconfig

2026-05-04 02:29:56 +09:00

initplace_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

initplace.go

fhs: move from container

2026-03-17 15:56:36 +09:00

initproc_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

initproc.go

check: move from container

2026-03-17 15:39:03 +09:00

initremount_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

initremount.go

check: move from container

2026-03-17 15:39:03 +09:00

initsymlink_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

initsymlink.go

all: use filepath

2026-03-30 18:24:53 +09:00

inittmpfs_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

inittmpfs.go

check: move from container

2026-03-17 15:39:03 +09:00

mount_test.go

internal/stub: move from container

2026-03-17 16:09:14 +09:00

mount.go

ext: move syscall wrappers from container

2026-03-17 15:48:40 +09:00

path_test.go

container/initoverlay: configure via fsconfig

2026-05-04 02:29:56 +09:00

path.go

all: use filepath

2026-03-30 18:24:53 +09:00

syscall_386.go

container: add 386 constants

2025-11-05 20:21:14 +09:00

syscall_amd64.go

container: move syscall constants

2025-07-07 13:23:01 +09:00

syscall_close_range.go

container: set CLOEXEC via close_range

2026-03-17 14:19:00 +09:00

syscall_range_proc.go

fhs: move from container

2026-03-17 15:56:36 +09:00

syscall.go

container: unexport PR_SET_NO_NEW_PRIVS wrapper

2026-04-10 23:45:51 +09:00

sysctl.go

fhs: move from container

2026-03-17 15:56:36 +09:00