Giuseppe Scrivano 41a6b992aa system: enhance check for re-exec into rootless userns ...

Previously, the setup only checked for the CAP_SYS_ADMIN capability,
which could be not enough with containerized Podman where
CAP_SYS_ADMIN might be set for an unprivileged user.

Closes: https://github.com/containers/podman/issues/20766

[NO NEW TESTS NEEDED] needs containerized Podman

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2023-11-24 13:22:19 +01:00

..

annotations

Remove ReservedAnnotations from kube generate specification

2023-01-18 08:46:24 -05:00

api

Automatic code cleanups - JetBrains

2023-11-07 14:05:15 -06:00

auth

fix(deps): update module github.com/docker/docker to v24

2023-05-22 15:32:12 +02:00

autoupdate

pkg/autoupdate: add !remote tag

2023-10-24 12:11:10 +02:00

bindings

(Temporary) Emergency CI fix: quay search is broken

2023-11-13 06:52:10 -07:00

channel

bump golangci-lint to v1.50.1

2022-12-15 13:39:56 +01:00

checkpoint

Merge pull request #19951 from Luap99/small-remote

2023-09-14 15:27:45 +02:00

copy

pkg: switch to golang native error wrapping

2022-07-08 08:54:47 +02:00

criu

lint: fix warnings found by protogetter

2023-10-20 16:26:10 +02:00

ctime

Replace deprecated ioutil

2022-09-20 15:34:27 -04:00

domain

system: enhance check for re-exec into rootless userns

2023-11-24 13:22:19 +01:00

emulation

Add podman farm build command

2023-10-24 12:58:39 -04:00

env

Revert "feat(env): support multiline in env-file"

2023-10-04 17:06:21 +02:00

errorhandling

Fix typos

2023-02-11 18:23:24 +01:00

farm

Add podman farm build command

2023-10-24 12:58:39 -04:00

fileserver

Initial addition of 9p code to Podman

2023-10-31 10:14:02 -04:00

inspect

pkg/inspect: remove unused ImageResult type

2022-05-24 16:07:39 +02:00

k8s.io

Automatic code cleanups - JetBrains

2023-11-07 14:05:15 -06:00

lookup

source code comments and docs: fix typos, language, Markdown layout

2023-05-22 07:52:16 +02:00

machine

Merge pull request #20528 from giuseppe/consolidate-xdg-runtime-code

2023-11-24 09:27:30 +00:00

namespaces

source code comments and docs: fix typos, language, Markdown layout

2023-05-22 07:52:16 +02:00

parallel

pkg/parallel/ctr: add !remote tag

2023-10-24 12:23:17 +02:00

ps

pkg/ps: add !remote tag

2023-10-24 12:21:31 +02:00

rctl

pkg/rctl: Remove unused cgo dependency

2022-10-31 15:13:48 +00:00

rootless

rootless: use functionalities from c/storage

2023-11-10 22:03:47 +01:00

seccomp

pkg: switch to golang native error wrapping

2022-07-08 08:54:47 +02:00

selinux

Fix SELinux functions names to not be repetitive

2020-04-23 15:57:34 -04:00

signal

Run codespell on code

2022-11-04 10:57:41 -04:00

specgen

Merge pull request #19879 from rhatdan/ulimits

2023-11-10 10:47:43 +00:00

specgenutil

new 'no-dereference' mount option

2023-11-21 13:17:58 +01:00

specgenutilexternal

Quadlet container mount - support non key=val options

2023-09-27 16:20:00 +03:00

strongunits

introduce pkg/strongunits

2023-09-20 11:19:41 -05:00

systemd

quadlet: Support healthy for Notify directives

2023-11-21 18:08:48 +00:00

terminal

podman ssh work, using new c/common interface

2022-08-09 14:00:58 -04:00

timetype

lint: fix warnings found by perfsprint

2023-10-20 16:27:46 +02:00

trust

Revert the usage of home.GetConfigHome()

2023-07-17 18:29:06 +02:00

util

pkg/util: use code from c/storage

2023-11-23 21:36:42 +01:00