package restrict
import "k8s.io/kubernetes/Godeps/_workspace/src/github.com/docker/libcontainer/security/restrict"
Index ¶
Functions ¶
func Restrict ¶
This has to be called while the container still has CAP_SYS_ADMIN (to be able to perform mounts). However, afterwards, CAP_SYS_ADMIN should be dropped (otherwise the user will be able to revert those changes).
Source Files ¶
restrict.go
- Version
- v0.13.2
- Published
- Mar 19, 2015
- Platform
- linux/amd64
- Imports
- 4 packages
- Last checked
- 47 seconds ago –
Tools for package owners.