caps

func DefaultCapabilities ¶

func DefaultCapabilities() []string

DefaultCapabilities returns a Linux kernel default capabilities

func GetAllCapabilities ¶

func GetAllCapabilities() []string

GetAllCapabilities returns all capabilities that are availeble in the current environment.

func NormalizeLegacyCapabilities ¶

func NormalizeLegacyCapabilities(caps []string) ([]string, error)

NormalizeLegacyCapabilities normalizes, and validates CapAdd/CapDrop capabilities by upper-casing them, and adding a CAP_ prefix (if not yet present).

This function also accepts the "ALL" magic-value, that's used by CapAdd/CapDrop.

func TweakCapabilities ¶

func TweakCapabilities(basics, adds, drops []string, privileged bool) ([]string, error)

TweakCapabilities tweaks capabilities by adding, dropping, or overriding capabilities in the basics capabilities list.