apply bounding for containers

LeChatP · Mar 14, 2024 · 49bfe4f · 49bfe4f
1 parent 2c2d610
commit 49bfe4f
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/config/mod.rs b/src/config/mod.rs
@@ -155,7 +155,7 @@ pub fn capset_to_string(set: &CapSet) -> String {
 
 pub fn parse_capset(s: &str) -> Result<CapSet, ParseCapError> {
     if s.is_empty() || s.eq_ignore_ascii_case("all") {
-        return Ok(!CapSet::empty());
+        return Ok(!CapSet::empty() & capctl::bounding::probe());
     }
 
     let mut res = CapSet::empty();

diff --git a/src/util.rs b/src/util.rs
@@ -1,4 +1,5 @@
 use capctl::{Cap, CapSet, ParseCapError};
+use tracing::warn;
 
 pub fn capset_to_string(set: &CapSet) -> String {
     set.iter()
@@ -29,13 +30,12 @@ where
             }
         }
     }
-
     Ok(res)
 }
 
 pub fn parse_capset(s: &str) -> Result<CapSet, ParseCapError> {
     if s.is_empty() || s.eq_ignore_ascii_case("all") {
-        return Ok(!CapSet::empty());
+        return Ok(!CapSet::empty() & capctl::bounding::probe());
     }
 
     parse_capset_iter(s.split(' '))