kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity

oci/caps: generate list of all capabilities on "init"

Browse source 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
This commit is contained in:
Sebastiaan van Stijn 2020-09-16 14:07:50 +02:00
parent 0ec6f7ea23
commit d786a52364
No known key found for this signature in database
GPG key ID: 76698F39D527CE8C
1 changed files with 10 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
oci/caps/utils.go
View file

@ -8,18 +8,24 @@ import (
"github.com/syndtr/gocapability/capability"
)
var capabilityList Capabilities
var (
allCaps []string
capabilityList Capabilities
)
func init() {
last := capability.CAP_LAST_CAP
rawCaps := capability.List()
allCaps = make([]string, min(int(last+1), len(rawCaps)))
capabilityList = make(Capabilities, min(int(last+1), len(rawCaps)))
for i, c := range rawCaps {
if c > last {
continue
}
capName := "CAP_" + strings.ToUpper(c.String())
allCaps[i] = capName
capabilityList[i] = &CapabilityMapping{
Key: "CAP_" + strings.ToUpper(c.String()),
Key: capName,
Value: c,
}
}
@ -52,11 +58,7 @@ func (c *CapabilityMapping) String() string {
// GetAllCapabilities returns all of the capabilities
func GetAllCapabilities() []string {
output := make([]string, len(capabilityList))
for i, c := range capabilityList {
output[i] = c.String()
}
return output
return allCaps
}
// inSlice tests whether a string is contained in a slice of strings or not.
@ -78,7 +80,6 @@ const allCapabilities = "ALL"
func NormalizeLegacyCapabilities(caps []string) ([]string, error) {
var normalized []string
valids := GetAllCapabilities()
for _, c := range caps {
c = strings.ToUpper(c)
if c == allCapabilities {
@ -88,7 +89,7 @@ func NormalizeLegacyCapabilities(caps []string) ([]string, error) {
if !strings.HasPrefix(c, "CAP_") {
c = "CAP_" + c
}
if !inSlice(valids, c) {
if !inSlice(allCaps, c) {
return nil, errdefs.InvalidParameter(fmt.Errorf("unknown capability: %q", c))
}
normalized = append(normalized, c)