Shailend ChandandgVisor bot 1b8a025e4a Cleanup creds-related funcs and change CapError behavior ...

- Introduce Credentials.HasRootCapability().
 - Rename Credentials.HasCapability() to Credentials.HasSelfCapability().
 - Rename Task.HasCapability() to Task.HasSelfCapability().
 - Introduce inet.Namespace.HasCapability(ctx).
 - CapError(), invoked by unimplemented syscalls' stubs, now checks
   against the root userns.

All towards making it less easy to evaluate creds relative to self userns
instead of root userns in the future.

PiperOrigin-RevId: 853942212

2026-01-08 17:23:58 -08:00

..

BUILD

socket(): Check for CAP_NET_RAW in the netns-owning userns

2025-12-12 20:09:51 -08:00

notifier.go

Fix a few typos

2025-01-29 21:16:51 -08:00

provider.go

Cleanup creds-related funcs and change CapError behavior

2026-01-08 17:23:58 -08:00

readwriter.go

Merge pull request #9551 from amysaq2023:support-external-stack

2024-09-23 14:12:32 -07:00

socket.go

Fix creds check in linkat(AT_EMPTY_PATH)

2026-01-07 12:48:17 -08:00

stack.go

Do not support netstack s/r for NetworkPlugin mode.

2025-06-02 13:12:11 -07:00

util.go

…