vendor: github.com/moby/sys/capability v0.4.0 - Githubissues

docker / cli

The Docker CLI

Apache License 2.0

4.96k stars 1.94k forks source link

vendor: github.com/moby/sys/capability v0.4.0 #5633

Closed thaJeztah closed 1 day ago

thaJeztah commented 3 days ago

full diff: https://github.com/moby/sys/compare/capability/v0.3.0...capability/v0.4.0

Added

New separate API for ambient (GetAmbient, SetAmbient, ResetAmbient) and bound (GetBound, DropBound) capabilities, modelled after libcap.

Fixed

Apply now returns an error if called for non-zero pid. Before this change, it could silently change some capabilities of the current process, instead of the one identified by the pid.
Fixed tests that change capabilities to be run in a separate process.
Other improvements in tests.

Changed

Use raw syscalls (which are slightly faster).
Most tests are now limited to testing the public API of the package.
Simplify parsing /proc/pid/status, add a test case.
Optimize the number of syscall to set ambient capabilities in Apply by clearing them first; add a test case.
Better documentation for Apply, NewFile, NewFile2, NewPid, NewPid2.

Removed

.golangci.yml and .codespellrc are no longer part of the package.

- A picture of a cute animal (not mandatory but encouraged)

codecov-commenter commented 3 days ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 59.50%. Comparing base (9861ce9) to head (446d413). Report is 10 commits behind head on master.

Additional details and impacted files

```diff @@ Coverage Diff @@ ## master #5633 +/- ## ======================================= Coverage 59.50% 59.50% ======================================= Files 346 346 Lines 29365 29365 ======================================= Hits 17474 17474 Misses 10916 10916 Partials 975 975 ```

🚨 Try these New Features:

Flaky Tests Detection - Detect and resolve failed and flaky tests