diff options
Diffstat (limited to 'container/capability.go')
| -rw-r--r-- | container/capability.go | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/container/capability.go b/container/capability.go index 9f526e65..3ea9d028 100644 --- a/container/capability.go +++ b/container/capability.go @@ -50,10 +50,16 @@ func capset(hdrp *capHeader, datap *[2]capData) error { } // capBoundingSetDrop drops a capability from the calling thread's capability bounding set. -func capBoundingSetDrop(cap uintptr) error { return Prctl(syscall.PR_CAPBSET_DROP, cap, 0) } +func capBoundingSetDrop(cap uintptr) error { + return Prctl(syscall.PR_CAPBSET_DROP, cap, 0) +} // capAmbientClearAll clears the ambient capability set of the calling thread. -func capAmbientClearAll() error { return Prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_CLEAR_ALL, 0) } +func capAmbientClearAll() error { + return Prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_CLEAR_ALL, 0) +} // capAmbientRaise adds to the ambient capability set of the calling thread. -func capAmbientRaise(cap uintptr) error { return Prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_RAISE, cap) } +func capAmbientRaise(cap uintptr) error { + return Prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_RAISE, cap) +} |