Daniel J Walsh bae80a0b66 Clear all caps, except the bounding set, when --user is specified. ...

Currently we are giving all caps to users when running with podman run --user,
They should get none by default.  If the command line includes --cap-add, then
we need to run with those capabilties.  Similarly we need to drop caps from
bounding set, if user specifies --cap-drop

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>

Closes: #851
Approved by: mheon

2018-05-31 13:46:08 +00:00

..

hooks

Add hooks support to podman

2018-04-05 14:13:49 +00:00

attach_test.go

sleep does not catch SIGTERM

2018-03-14 20:38:08 +00:00

commit_test.go

do not commit default volumes from container

2018-04-30 21:07:59 +00:00

create_test.go

Inspect output should be in array form

2018-02-21 14:22:36 +00:00

diff_test.go

Add one test case for check diff in container and committed image

2018-04-19 14:19:04 +00:00

exec_test.go

podman exec should handle options --env foo

2018-03-26 23:27:00 +00:00

export_test.go

Make ':' a restricted character for file names

2018-04-30 19:58:22 +00:00

history_test.go

Migrate diff, exec, export, and history to ginkgo

2018-02-05 20:17:37 +00:00

images_test.go

Allow sha256: prefix for input

2018-03-29 16:31:43 +00:00

import_test.go

Inspect output should be in array form

2018-02-21 14:22:36 +00:00

info_test.go

Initial gingko work

2018-01-29 19:12:20 +00:00

inspect_test.go

Inspect output should be in array form

2018-02-21 14:22:36 +00:00

kill_test.go

sleep does not catch SIGTERM

2018-03-14 20:38:08 +00:00

libpod_suite_test.go

save and load should support multi-tag for docker-archive

2018-05-25 15:15:47 +00:00

load_test.go

save and load should support multi-tag for docker-archive

2018-05-25 15:15:47 +00:00

logs_test.go

podman logs: fix tailing

2018-02-09 15:27:52 +00:00

mount_test.go

Final ginkgo migration

2018-02-08 12:37:07 -06:00

pause_test.go

sleep does not catch SIGTERM

2018-03-14 20:38:08 +00:00

port_test.go

Final ginkgo migration

2018-02-08 12:37:07 -06:00

ps_test.go

sleep does not catch SIGTERM

2018-03-14 20:38:08 +00:00

pull_test.go

Image library stage 4 - create and commit

2018-03-20 16:20:12 +00:00

push_test.go

Spell check strings and comments

2018-05-25 08:45:15 +00:00

restart_test.go

Add restart test with timeout

2018-04-23 17:34:26 +08:00

rm_test.go

Add a test case for remove the latest container

2018-03-16 13:35:10 +00:00

rmi_test.go

Spell check strings and comments

2018-05-25 08:45:15 +00:00

run_cgroup_parent_test.go

Skip systemd-style CGroups test

2018-05-11 14:43:57 +00:00

run_cpu_test.go

Migrate diff, exec, export, and history to ginkgo

2018-02-05 20:17:37 +00:00

run_device_test.go

Migrate diff, exec, export, and history to ginkgo

2018-02-05 20:17:37 +00:00

run_dns_test.go

ip validation game too strong

2018-04-18 10:58:24 +00:00

run_entrypoint_test.go

No entrpoint, cmd, or command

2018-02-15 00:48:13 +00:00

run_exit_test.go

Correct exit code 126 and 127

2018-02-21 16:49:00 +00:00

run_memory_test.go

More ginkgo migration

2018-02-07 14:55:20 -06:00

run_networking_test.go

podman should assign a host port to -p when omitted

2018-05-01 21:47:34 +00:00

run_ns_test.go

More ginkgo migration

2018-02-07 14:55:20 -06:00

run_privileged_test.go

Only allocate tty when -t

2018-04-03 22:23:23 +00:00

run_restart_test.go

Allow the use of -i/-a on any container

2018-04-14 13:48:35 +00:00

run_signal_test.go

Eliminate raceyness of sig-proxy test

2018-03-30 09:17:27 +00:00

run_test.go

Clear all caps, except the bounding set, when --user is specified.

2018-05-31 13:46:08 +00:00

run_userns_test.go

test/e2e/run_userns_test.go: new file

2018-05-04 17:15:55 +00:00

save_test.go

Make ':' a restricted character for file names

2018-04-30 19:58:22 +00:00

search_test.go

Add some podman search test with filter

2018-04-24 13:42:37 +00:00

start_test.go

Fix broken 'podman start' test

2018-03-15 17:45:11 +00:00

stats_test.go

sleep does not catch SIGTERM

2018-03-14 20:38:08 +00:00

stop_test.go

sleep does not catch SIGTERM

2018-03-14 20:38:08 +00:00

tag_test.go

Tagging an image alias by shortname

2018-02-26 18:28:54 +00:00

top_test.go

sleep does not catch SIGTERM

2018-03-14 20:38:08 +00:00

version_test.go

More ginkgo migration

2018-02-07 14:55:20 -06:00

wait_test.go

Initial gingko work

2018-01-29 19:12:20 +00:00