From cd9b534d6b1d432d3c997ccc5b14f630afb9dda6 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Sat, 28 Feb 2026 20:18:30 +0900 Subject: container: improve documentation This change removes inconsistencies collected over time in this package. Signed-off-by: Ophestra --- container/capability.go | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) (limited to 'container/capability.go') diff --git a/container/capability.go b/container/capability.go index 9f526e65..3ea9d028 100644 --- a/container/capability.go +++ b/container/capability.go @@ -50,10 +50,16 @@ func capset(hdrp *capHeader, datap *[2]capData) error { } // capBoundingSetDrop drops a capability from the calling thread's capability bounding set. -func capBoundingSetDrop(cap uintptr) error { return Prctl(syscall.PR_CAPBSET_DROP, cap, 0) } +func capBoundingSetDrop(cap uintptr) error { + return Prctl(syscall.PR_CAPBSET_DROP, cap, 0) +} // capAmbientClearAll clears the ambient capability set of the calling thread. -func capAmbientClearAll() error { return Prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_CLEAR_ALL, 0) } +func capAmbientClearAll() error { + return Prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_CLEAR_ALL, 0) +} // capAmbientRaise adds to the ambient capability set of the calling thread. -func capAmbientRaise(cap uintptr) error { return Prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_RAISE, cap) } +func capAmbientRaise(cap uintptr) error { + return Prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_RAISE, cap) +} -- cgit v1.3.1