GetProcessEffective returns effective capabilities for the current process.

GetProcessInheritable returns inheritable capabilities for the current process.

GetProcessPermitted returns permitted capabilities for the current process.

Normalize takes a slice of capabilities, normalizes and unwraps CAP_ALL.

ReadFrom reads a capability configuration from an io.Reader and returns a capability config with the set of authorized user/group capabilities.

RemoveDuplicated removes duplicated capabilities from provided list.

SetProcessEffective set effective capabilities for the the current process and returns previous effective set.

Split takes a list of capabilities separated by commas and returns a string list with normalized capability name and a second list with unrecognized capabilities.

Ambient capability string constant.

Bounding capability string constant.

Effective capability string constant.

Inheritable capability string constant.

Permitted capability string constant.

Map maps each capability name to a struct with details about the capability.

Config is the in memory representation of the user/group capability authorizations as set by an admin.

Caplist defines a map of users/groups with associated list of capabilities.