Victor Marmol 9d6875d19d Change libcontainer to drop all capabilities by default. Only keeps ... those that were specified in the config. This commit also explicitly adds a set of capabilities that we were silently not dropping and were assumed by the tests. Docker-DCO-1.1-Signed-off-by: Victor Marmol <vmarmol@google.com> (github: vmarmol)		2014-05-16 00:57:58 +00:00
..
capabilities	Change libcontainer to drop all capabilities by default. Only keeps	2014-05-16 00:57:58 +00:00
restrict	Update restrict.Restrict to both show the error message when failing to mount /dev/null over /proc/kcore, and to ignore "not exists" errors while doing so (for when CONFIG_PROC_KCORE=n in the kernel)	2014-05-08 01:03:45 -06:00