mirror of
https://github.com/containers/podman.git
synced 2025-11-30 18:18:18 +08:00
fix(deps): update github.com/opencontainers/runtime-tools digest to 0ea5ed0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
11
vendor/github.com/opencontainers/runtime-tools/generate/generate.go
generated
vendored
11
vendor/github.com/opencontainers/runtime-tools/generate/generate.go
generated
vendored
@@ -8,10 +8,10 @@ import (
|
||||
"os"
|
||||
"strings"
|
||||
|
||||
"github.com/moby/sys/capability"
|
||||
rspec "github.com/opencontainers/runtime-spec/specs-go"
|
||||
"github.com/opencontainers/runtime-tools/generate/seccomp"
|
||||
capsCheck "github.com/opencontainers/runtime-tools/validate/capabilities"
|
||||
"github.com/syndtr/gocapability/capability"
|
||||
)
|
||||
|
||||
var (
|
||||
@@ -1135,10 +1135,11 @@ func (g *Generator) ClearMounts() {
|
||||
func (g *Generator) SetupPrivileged(privileged bool) {
|
||||
if privileged { // Add all capabilities in privileged mode.
|
||||
var finalCapList []string
|
||||
for _, cap := range capability.List() {
|
||||
if g.HostSpecific && cap > capsCheck.LastCap() {
|
||||
continue
|
||||
}
|
||||
capList := capability.ListKnown()
|
||||
if g.HostSpecific {
|
||||
capList, _ = capability.ListSupported()
|
||||
}
|
||||
for _, cap := range capList {
|
||||
finalCapList = append(finalCapList, fmt.Sprintf("CAP_%s", strings.ToUpper(cap.String())))
|
||||
}
|
||||
g.initConfigLinux()
|
||||
|
||||
Reference in New Issue
Block a user