Justin Cormack c1ca124682 Gate name_to_handle_at by CAP_SYS_ADMIN not CAP_DAC_READ_SEARCH ... Only open_by_handle_at requires CAP_DAC_READ_SEARCH. This allows systemd to run with only `--cap-add SYS_ADMIN` rather than having to also add `--cap-add DAC_READ_SEARCH` as well which it does not really need. Signed-off-by: Justin Cormack <justin.cormack@docker.com>		2016-08-10 12:22:36 +01:00
..
apparmor	profiles: apparmor: actually calculate version	2016-03-20 19:03:19 +11:00
seccomp	Gate name_to_handle_at by CAP_SYS_ADMIN not CAP_DAC_READ_SEARCH	2016-08-10 12:22:36 +01:00