1. docker
  2. Commit fd58524f81031eec112b5e9bd52bfaa186fc9c20
Browse code

Add system.SetKeepCaps and system.ClearKeepCaps

Docker-DCO-1.1-Signed-off-by: Bernerd Schaefer <bj.schaefer@gmail.com> (github: bernerdschaefer)

Bernerd Schaefer authored on 2014/05/28 23:40:36
Showing 1 changed files
pkg/system/calls_linux.go
History View file @ fd58524
... ... 
@@ -135,6 +135,22 @@ func GetParentDeathSignal() (int, error) {
135 135 
 	return sig, nil
136 136 
 }
137 137
138 
+func SetKeepCaps() error {
139 
+	if _, _, err := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_KEEPCAPS, 1, 0); err != 0 {
140 
+		return err
141 
+	}
142 
+
143 
+	return nil
144 
+}
145 
+
146 
+func ClearKeepCaps() error {
147 
+	if _, _, err := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_KEEPCAPS, 0, 0); err != 0 {
148 
+		return err
149 
+	}
150 
+
151 
+	return nil
152 
+}
153 
+
138 154 
 func Setctty() error {
139 155 
 	if _, _, err := syscall.RawSyscall(syscall.SYS_IOCTL, 0, uintptr(syscall.TIOCSCTTY), 0); err != 0 {
140 156 
 		return err