AllCapabilities returns all known capabilities.

BoundingSet returns the capabilities in the current bounding set.

MergeCapabilities computes a set of capabilities by adding capabilities to or dropping them from base.

NormalizeCapabilities normalizes caps by adding a "CAP_" prefix (if not yet present).

ValidateCapabilities validates if caps only contains valid capabilities.

All is a special value used to add/drop all known capabilities.

ContainerImageLabels - label can indicate the required capabilities required by containers to run the container image.

ErrUnknownCapability is thrown when an unknown capability is processed.