Samuel Karp 0d9a37d0c2 oci: inheritable capability set should be empty ...

The Linux kernel never sets the Inheritable capability flag to anything
other than empty.  Moby should have the same behavior, and leave it to
userspace code within the container to set a non-empty value if desired.

Reported-by: Andrew G. Morgan <morgan@kernel.org>
Signed-off-by: Samuel Karp <skarp@amazon.com>

2022-02-08 14:33:44 -08:00

1.7 KiB

Raw Permalink Blame History

View Raw