opensource/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2025-08-06 11:32:07 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
podman/pkg/specgen
History
Giuseppe Scrivano c919f0b884 do not set the inheritable capabilities 
The kernel never sets the inheritable capabilities for a process, they
are only set by userspace.  Emulate the same behavior.

Closes: CVE-2022-27649

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
(cherry picked from commit aafa80918a245edcbdaceb1191d749570f1872d0)
2022-03-29 17:44:50 +02:00
..
generate
do not set the inheritable capabilities
2022-03-29 17:44:50 +02:00
config_unsupported.go
migrate Podman to containers/common/libimage
2021-05-05 11:30:12 +02:00
container_validate.go
bump go module to version 4
2022-01-18 12:47:07 +01:00
namespaces_test.go
bump go module to version 4
2022-01-18 12:47:07 +01:00
namespaces.go
Podman pod create --share-parent vs --share=cgroup
2022-02-10 13:49:46 -05:00
pod_validate.go
bump go module to version 4
2022-01-18 12:47:07 +01:00
podspecgen.go
Podman pod create --share-parent vs --share=cgroup
2022-02-10 13:49:46 -05:00
specgen_test.go
fix test
2021-10-11 17:41:58 +08:00
specgen.go
Run codespell on code
2022-01-21 09:52:12 -05:00
volumes.go
libpod/option.go remove error stutter from wrap/wraf
2021-08-17 16:14:02 +05:30