mirror of
https://github.com/containers/podman
synced 2024-10-21 17:53:44 +00:00
bae80a0b66
Currently we are giving all caps to users when running with podman run --user, They should get none by default. If the command line includes --cap-add, then we need to run with those capabilties. Similarly we need to drop caps from bounding set, if user specifies --cap-drop Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> Closes: #851 Approved by: mheon |
||
---|---|---|
.. | ||
annotations | ||
chrootuser | ||
hooks | ||
inspect | ||
kubeutils | ||
registrar | ||
registries | ||
secrets | ||
spec | ||
util | ||
varlinkapi |