5201bb5120
Docker-DCO-1.1-Signed-off-by: Victor Vieux <vieux@docker.com> (github: vieux) Upstream-commit: 064b5f870db39e33f18d6dd405f2bdab98255ef7 Component: engine
35 lines
665 B
Go
35 lines
665 B
Go
package execdriver
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/docker/libcontainer/security/capabilities"
|
|
"github.com/dotcloud/docker/utils"
|
|
)
|
|
|
|
func TweakCapabilities(basics, adds, drops []string) []string {
|
|
var caps []string
|
|
|
|
if utils.StringsContainsNoCase(adds, "all") {
|
|
basics = capabilities.GetAllCapabilities()
|
|
}
|
|
|
|
if !utils.StringsContainsNoCase(drops, "all") {
|
|
for _, cap := range basics {
|
|
if !utils.StringsContainsNoCase(drops, cap) {
|
|
caps = append(caps, cap)
|
|
}
|
|
}
|
|
}
|
|
|
|
for _, cap := range adds {
|
|
if strings.ToLower(cap) == "all" {
|
|
continue
|
|
}
|
|
if !utils.StringsContainsNoCase(caps, cap) {
|
|
caps = append(caps, cap)
|
|
}
|
|
}
|
|
return caps
|
|
}
|