package restrict

import "github.com/docker/libcontainer/security/restrict"

Index ¶

• func Restrict(mounts ...string) error

Functions ¶

func Restrict ¶

func Restrict(mounts ...string) error

This has to be called while the container still has CAP_SYS_ADMIN (to be able to perform mounts). However, afterwards, CAP_SYS_ADMIN should be dropped (otherwise the user will be able to revert those changes).

Source Files ¶

restrict.go