Daniel Golle a2def3663a procd: jail: clean up capability handling and non-root ubusd
Unify capability handling to only use OCI spec parsers even for ujail
slim containers which previously supposedly used their own format.

 80c9516 cgroups: restrict allowed keys in 'unified' section
 5ade567 cgroups: memory controller fixes
 3121467 early: run ubusd non-root as user ubus, group ubus
 12a5b97 jail: adapt to new ubus socket path
 788d144 instance: actually wire up capabilities filename
 ebc5a7f jail: nuke old capabilities code in favour of reusing OCI code
 6c5233a jail: capabilities: apply in two phases

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-10-21 15:22:30 +01:00
..
2020-10-16 01:53:00 +01:00
2019-11-14 22:53:31 +01:00
2018-02-11 14:39:16 +01:00
2020-08-30 22:18:35 +02:00
2020-08-31 22:44:26 +01:00
2020-09-18 08:19:04 +02:00
2020-06-26 23:48:51 +02:00
2020-05-24 17:01:36 +02:00
2020-04-30 21:51:02 +02:00
2020-05-23 13:38:12 +02:00