buildah/chroot
Giuseppe Scrivano f1228fca5b do not set the inheritable capabilities
The kernel never sets the inheritable capabilities for a process, they
are only set by userspace.  Emulate the same behavior.

Closes: CVE-2022-27651

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-03-24 17:41:03 -04:00
..
run.go do not set the inheritable capabilities 2022-03-24 17:41:03 -04:00
run_test.go
seccomp.go
seccomp_unsupported.go
selinux.go SELinux no longer requires a tag. 2020-12-21 15:24:28 -05:00
selinux_unsupported.go SELinux no longer requires a tag. 2020-12-21 15:24:28 -05:00
unsupported.go