binctr/vendor/github.com/opencontainers/runc/libcontainer/setgroups_linux.go
Jess Frazelle 2b527491fe POC no setuid, setgid caps
Signed-off-by: Jess Frazelle <jess@mesosphere.com>
2016-04-17 21:13:18 -07:00

11 lines
294 B
Go

// +build linux,go1.5
package libcontainer
import "syscall"
// Set the GidMappingsEnableSetgroups member to true, so the process's
// setgroups proc entry wont be set to 'deny' if GidMappings are set
func enableSetgroups(sys *syscall.SysProcAttr) {
sys.GidMappingsEnableSetgroups = false
}