go
/
gvisor
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update comment 

PiperOrigin-RevId: 254428866
This commit is contained in:
Fabricio Voznika 2019-06-21 10:55:38 -07:00 committed by gVisor bot
parent dc36c34a76
commit 054b5632ef
2 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
pkg/abi/linux/capability.go
View File

@ -60,13 +60,14 @@ const (
CAP_BLOCK_SUSPEND = Capability(36) CAP_BLOCK_SUSPEND = Capability(36)
CAP_AUDIT_READ = Capability(37) CAP_AUDIT_READ = Capability(37)
// MaxCapability is the highest-numbered capability. // CAP_LAST_CAP is the highest-numbered capability.
MaxCapability = CAP_AUDIT_READ // Seach for "CAP_LAST_CAP" to find other places that need to change.
CAP_LAST_CAP = CAP_AUDIT_READ
) )
// Ok returns true if cp is a supported capability. // Ok returns true if cp is a supported capability.
func (cp Capability) Ok() bool { func (cp Capability) Ok() bool {
return cp >= 0 && cp <= MaxCapability return cp >= 0 && cp <= CAP_LAST_CAP
} }
// String returns the capability name. // String returns the capability name.

2
pkg/sentry/kernel/auth/capability_set.go
View File

@ -24,7 +24,7 @@ import (
type CapabilitySet uint64 type CapabilitySet uint64
// AllCapabilities is a CapabilitySet containing all valid capabilities. // AllCapabilities is a CapabilitySet containing all valid capabilities.
var AllCapabilities = CapabilitySetOf(linux.MaxCapability+1) - 1 var AllCapabilities = CapabilitySetOf(linux.CAP_LAST_CAP+1) - 1
// CapabilitySetOf returns a CapabilitySet containing only the given // CapabilitySetOf returns a CapabilitySet containing only the given
// capability. // capability.