package libcontainer import ( "errors" "github.com/syndtr/gocapability/capability" ) var ( ErrUnkownNamespace = errors.New("Unknown namespace") ErrUnkownCapability = errors.New("Unknown capability") ErrUnsupported = errors.New("Unsupported method") ) // namespaceList is used to convert the libcontainer types // into the names of the files located in /proc//ns/* for // each namespace var ( namespaceList = Namespaces{} capabilityList = Capabilities{ {Key: "SETPCAP", Value: capability.CAP_SETPCAP, Enabled: false}, {Key: "SYS_MODULE", Value: capability.CAP_SYS_MODULE, Enabled: false}, {Key: "SYS_RAWIO", Value: capability.CAP_SYS_RAWIO, Enabled: false}, {Key: "SYS_PACCT", Value: capability.CAP_SYS_PACCT, Enabled: false}, {Key: "SYS_ADMIN", Value: capability.CAP_SYS_ADMIN, Enabled: false}, {Key: "SYS_NICE", Value: capability.CAP_SYS_NICE, Enabled: false}, {Key: "SYS_RESOURCE", Value: capability.CAP_SYS_RESOURCE, Enabled: false}, {Key: "SYS_TIME", Value: capability.CAP_SYS_TIME, Enabled: false}, {Key: "SYS_TTY_CONFIG", Value: capability.CAP_SYS_TTY_CONFIG, Enabled: false}, {Key: "MKNOD", Value: capability.CAP_MKNOD, Enabled: false}, {Key: "AUDIT_WRITE", Value: capability.CAP_AUDIT_WRITE, Enabled: false}, {Key: "AUDIT_CONTROL", Value: capability.CAP_AUDIT_CONTROL, Enabled: false}, {Key: "MAC_OVERRIDE", Value: capability.CAP_MAC_OVERRIDE, Enabled: false}, {Key: "MAC_ADMIN", Value: capability.CAP_MAC_ADMIN, Enabled: false}, {Key: "NET_ADMIN", Value: capability.CAP_NET_ADMIN, Enabled: false}, } ) type ( Namespace struct { Key string `json:"key,omitempty"` Enabled bool `json:"enabled,omitempty"` Value int `json:"value,omitempty"` File string `json:"file,omitempty"` } Namespaces []*Namespace ) func (ns *Namespace) String() string { return ns.Key } func GetNamespace(key string) *Namespace { for _, ns := range namespaceList { if ns.Key == key { cpy := *ns return &cpy } } return nil } // Contains returns true if the specified Namespace is // in the slice func (n Namespaces) Contains(ns string) bool { return n.Get(ns) != nil } func (n Namespaces) Get(ns string) *Namespace { for _, nsp := range n { if nsp.Key == ns { return nsp } } return nil } type ( Capability struct { Key string `json:"key,omitempty"` Enabled bool `json:"enabled"` Value capability.Cap `json:"value,omitempty"` } Capabilities []*Capability ) func (c *Capability) String() string { return c.Key } func GetCapability(key string) *Capability { for _, capp := range capabilityList { if capp.Key == key { cpy := *capp return &cpy } } return nil } // Contains returns true if the specified Capability is // in the slice func (c Capabilities) Contains(capp string) bool { return c.Get(capp) != nil } func (c Capabilities) Get(capp string) *Capability { for _, cap := range c { if cap.Key == capp { return cap } } return nil }