diff --git a/Makefile b/Makefile index 9b72ed604..779be9255 100644 --- a/Makefile +++ b/Makefile @@ -33,7 +33,7 @@ static: $(RUNC_LINK) CGO_ENABLED=1 go build -i -tags "$(BUILDTAGS) cgo static_build" -ldflags "-w -extldflags -static -X main.gitCommit=${COMMIT} -X main.version=${VERSION}" -o runc . release: $(RUNC_LINK) - @flag_list=(seccomp selinux apparmor static); \ + @flag_list=(seccomp selinux apparmor static ambient); \ unset expression; \ for flag in "$${flag_list[@]}"; do \ expression+="' '{'',$${flag}}"; \ diff --git a/README.md b/README.md index b8ed43fc7..6c6d1d45e 100644 --- a/README.md +++ b/README.md @@ -48,6 +48,7 @@ make BUILDTAGS='seccomp apparmor' | seccomp | Syscall filtering | libseccomp | | selinux | selinux process and mount labeling | | | apparmor | apparmor profile support | libapparmor | +| ambient | ambient capability support | kernel 4.3 | ### Running the test suite diff --git a/libcontainer/capabilities_ambient.go b/libcontainer/capabilities_ambient.go new file mode 100644 index 000000000..50da2832f --- /dev/null +++ b/libcontainer/capabilities_ambient.go @@ -0,0 +1,7 @@ +// +build linux,ambient + +package libcontainer + +import "github.com/syndtr/gocapability/capability" + +const allCapabilityTypes = capability.CAPS | capability.BOUNDS | capability.AMBS diff --git a/libcontainer/capabilities_linux.go b/libcontainer/capabilities_linux.go index 48338a113..31fd0dcf5 100644 --- a/libcontainer/capabilities_linux.go +++ b/libcontainer/capabilities_linux.go @@ -10,8 +10,6 @@ import ( "github.com/syndtr/gocapability/capability" ) -const allCapabilityTypes = capability.CAPS | capability.BOUNDS | capability.AMBS - var capabilityMap map[string]capability.Cap func init() { diff --git a/libcontainer/capabilities_noambient.go b/libcontainer/capabilities_noambient.go new file mode 100644 index 000000000..752c4e516 --- /dev/null +++ b/libcontainer/capabilities_noambient.go @@ -0,0 +1,7 @@ +// +build !ambient,linux + +package libcontainer + +import "github.com/syndtr/gocapability/capability" + +const allCapabilityTypes = capability.CAPS | capability.BOUNDS