mirrors/binctr
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

POC no setuid, setgid caps

Browse source 
Signed-off-by: Jess Frazelle <jess@mesosphere.com>
This commit is contained in:
Jess Frazelle 2016-04-17 21:13:18 -07:00
parent 69cba73cf6
commit 2b527491fe
10 changed files with 156 additions and 171 deletions
Download patch file Download diff file Expand all files Collapse all files

2
vendor/github.com/opencontainers/runc/libcontainer/setgroups_linux.go generated vendored
View file

@ -7,5 +7,5 @@ import "syscall"
// Set the GidMappingsEnableSetgroups member to true, so the process's
// setgroups proc entry wont be set to 'deny' if GidMappings are set
func enableSetgroups(sys *syscall.SysProcAttr) {
sys.GidMappingsEnableSetgroups = true
sys.GidMappingsEnableSetgroups = false
}