Tycho Andersen bce56e0072 libcontainer/validator: allow setting user.* sysctls inside userns ...

These sysctls are all per-userns (termed `ucounts` in the kernel code) are
settable with CAP_SYS_RESOURCE in the user namespace.

Signed-off-by: Tycho Andersen <tycho@tycho.pizza>
(cherry picked from commit 70d88bc449)

2025-09-15 08:46:53 -06:00

..

validate

libcontainer/validator: allow setting user.* sysctls inside userns

2025-09-15 08:46:53 -06:00

cgroup_deprecated.go

libct/configs: fix/improve deprecation notices

2025-06-18 18:14:46 -07:00

config_linux_test.go

Capitalize [UG]idMappings as [UG]IDMappings

2023-07-21 13:55:34 +02:00

config_linux.go

configs: make id mappings int64 to better handle 32-bit

2023-12-14 12:14:32 +11:00

config_test.go

Modernize code for Go 1.24

2025-08-27 19:11:02 -07:00

config.go

Modernize code for Go 1.24

2025-08-27 19:11:02 -07:00

configs_fuzzer.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

doc.go

libcontainer/configs package doc

2025-06-18 15:52:30 +01:00

intelrdt.go

libcontainer/intelrdt: support ClosID parameter

2021-08-09 15:58:03 +03:00

mount_linux.go

Make state.json 25% smaller

2025-03-19 15:51:52 -07:00

mount_unsupported.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

mount.go

mount: add support for ridmap and idmap

2023-12-14 11:36:42 +11:00

namespaces_linux.go

libct/configs: use slices.Delete

2025-03-31 17:15:06 -07:00

namespaces_syscall_unsupported.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

namespaces_syscall.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

namespaces_unsupported.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

namespaces.go

Move libcontainer into subdirectory

2015-06-21 19:29:15 -07:00

netdevices.go

Add support for Linux Network Devices

2025-06-18 15:52:30 +01:00

network.go

Make state.json 25% smaller

2025-03-19 15:51:52 -07:00

tocpuset_test.go

Modernize code for Go 1.24

2025-08-27 19:11:02 -07:00