The oslo_privsep.capabilities Module

The oslo_privsep.capabilities Module

oslo_privsep.capabilities.drop_all_caps_except(effective, permitted, inheritable)

Set (effective, permitted, inheritable) to provided list of caps

oslo_privsep.capabilities.get_caps()

Return (effective, permitted, inheritable) as lists of caps

oslo_privsep.capabilities.set_keepcaps(enable)

Set/unset thread’s “keep capabilities” flag - see prctl(2)

Creative Commons Attribution 3.0 License

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.