Giuseppe Scrivano e85cf8f4a2 security: use the bounding caps with --privileged ...

when --privileged is used, make sure to not request more capabilities
than currently available in the current context.

[NO TESTS NEEDED] since it fixes existing tests.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2021-03-19 15:17:11 +01:00

..

annotations

Spelling

2020-12-22 13:34:31 -05:00

api

Fix volumes and networks list/prune filters in http api

2021-03-19 00:09:29 +01:00

auth

Enable whitespace linter

2021-02-11 23:01:56 +01:00

autoupdate

Do not leak libpod package into the remote client

2021-03-15 14:02:04 +01:00

bindings

pkg/bindings/images.Build(): fix a race condition in error reporting

2021-03-16 14:14:32 -04:00

cgroups

Merge pull request #9464 from giuseppe/fix-cgroupv1-stats

2021-02-22 15:48:44 -05:00

channel

fix closed the remote connection on pull causes service panic

2020-10-03 11:38:38 +08:00

checkpoint

Use functions and defines from checkpointctl

2021-03-02 17:00:06 +00:00

copy

podman cp: support copying on tmpfs mounts

2021-03-04 15:43:12 +01:00

criu

Add helper function to read out CRIU version

2018-10-23 12:52:03 +02:00

ctime

Re-add int64 casts for ctime

2019-07-23 15:43:40 -04:00

domain

Merge pull request #9710 from jmguzik/network-prune-filters-http-api

2021-03-18 06:32:29 -07:00

env

Ensure DefaultEnvVariables is used in Specgen

2020-08-18 15:17:46 -04:00

errorhandling

Reduce general binding binary size

2021-01-13 09:35:24 -06:00

hooks

bump go module to v3

2021-02-22 09:03:51 +01:00

inspect

bump go module to v3

2021-02-22 09:03:51 +01:00

kubeutils

prune remotecommand dependency

2021-02-25 10:02:41 -06:00

lookup

Enable whitespace linter

2021-02-11 23:01:56 +01:00

namespaces

[CI:DOCS] BZ1860126 - Fix userns defaults in run man page

2020-08-07 15:42:13 -04:00

netns

bump go module to v3

2021-02-22 09:03:51 +01:00

network

Split libpod/network package

2021-03-15 14:01:52 +01:00

parallel

bump go module to v3

2021-02-22 09:03:51 +01:00

ps

bump go module to v3

2021-02-22 09:03:51 +01:00

registrar

bump go module to v3

2021-02-22 09:03:51 +01:00

registries

Document CONTAINERS_CONF/CONTAINERS_STORAGE_CONF Env variables

2021-03-10 06:34:47 -05:00

resolvconf

bump go module to v3

2021-02-22 09:03:51 +01:00

rootless

bump go module to v3

2021-02-22 09:03:51 +01:00

rootlessport

Enable whitespace linter

2021-02-11 23:01:56 +01:00

seccomp

Spelling

2020-12-22 13:34:31 -05:00

selinux

Fix SELinux functions names to not be repetitive

2020-04-23 15:57:34 -04:00

signal

Fix build for mips architecture follow-up

2021-01-07 15:04:22 +01:00

specgen

security: use the bounding caps with --privileged

2021-03-19 15:17:11 +01:00

systemd

Do not leak libpod package into the remote client

2021-03-15 14:02:04 +01:00

terminal

pkg/terminal: use c/storage/pkg/homedir

2021-03-08 09:21:13 +01:00

timetype

make lint: enable gocritic

2020-01-13 14:27:02 +01:00

trust

Enable whitespace linter

2021-02-11 23:01:56 +01:00

util

Fix volumes and networks list/prune filters in http api

2021-03-19 00:09:29 +01:00