diff options
| author | Etienne CHAMPETIER <champetier.etienne@gmail.com> | 2015-08-27 01:26:45 +0200 |
|---|---|---|
| committer | John Crispin <blogic@openwrt.org> | 2015-10-07 11:07:54 +0200 |
| commit | 51201235db9dad9fe1823d9de46ed90f5e160fd0 (patch) | |
| tree | 6abff11a7f8ffd602756ce3802ddafdab48bdc9e /service/validate.c | |
| parent | fafbf7338ec8304f2a0ec0ba76048fba2c01c07e (diff) | |
| download | unitd-51201235db9dad9fe1823d9de46ed90f5e160fd0.tar unitd-51201235db9dad9fe1823d9de46ed90f5e160fd0.zip | |
jail: add capabilities support
If there is one or more capabilities in cap.keep,
drop all capabilities not in cap.keep.
Always drop all capabalities in cap.drop
exemple json syntax:
{
"cap.keep": [
"cap_net_raw"
],
"cap.drop": []
}
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
Diffstat (limited to 'service/validate.c')
0 files changed, 0 insertions, 0 deletions