Skip to content

generate: add process-cap-add and process-cap-drop option#675

Merged
liangchenye merged 2 commits intoopencontainers:masterfrom
zhouhao3:add-process-add
Dec 14, 2018
Merged

generate: add process-cap-add and process-cap-drop option#675
liangchenye merged 2 commits intoopencontainers:masterfrom
zhouhao3:add-process-add

Conversation

@zhouhao3
Copy link
Copy Markdown

@zhouhao3 zhouhao3 commented Dec 6, 2018

Add process-cap-add option to add Linux capabilities to all 5 capability sets.

oci-runtime-tool generate --process-cap-add CAP_FOWNER,CAP_FSETID

Add process-cap-drop option to drop Linux capabilities to all 5 capability sets.

oci-runtime-tool generate --process-cap-drop CAP_FOWNER,CAP_FSETID

@liangchenye
Copy link
Copy Markdown
Member

It looks good, can you rebase this PR?

Zhou Hao added 2 commits December 14, 2018 13:33
Add process-cap-add option to add Linux capabilities to all 5 capability sets.

```
oci-runtime-tool generate --process-cap-add CAP_FOWNER,CAP_FSETID
```

Signed-off-by: Zhou Hao <zhouhao@cn.fujitsu.com>
Add process-cap-drop option to drop Linux capabilities to all 5 capability sets.

```
oci-runtime-tool generate --process-cap-drop CAP_FOWNER,CAP_FSETID
```

Signed-off-by: Zhou Hao <zhouhao@cn.fujitsu.com>
@zhouhao3
Copy link
Copy Markdown
Author

Rebased, PTAL.

@liangchenye
Copy link
Copy Markdown
Member

liangchenye commented Dec 14, 2018

LGTM

Approved with PullApprove

@liangchenye liangchenye merged commit f60dccd into opencontainers:master Dec 14, 2018
@zhouhao3 zhouhao3 deleted the add-process-add branch December 14, 2018 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants