AddNoNewPrivileges returns if we should add the no_new_privs option.

ConvertToRuntimeMaskedPaths converts the ProcMountType to the specified or default masked paths.

ConvertToRuntimeReadonlyPaths converts the ProcMountType to the specified or default readonly paths.

HasCapabilitiesRequest returns true if Adds or Drops are defined in the security context capabilities, taking into account nils.

HasPrivilegedRequest returns the value of SecurityContext.Privileged, taking into account the possibility of nils.

NewPodSecurityContextAccessor returns an accessor for the given pod security context.

NewPodSecurityContextMutator returns a mutator for the given pod security context.

ParseSELinuxOptions parses a string containing a full SELinux context (user, role, type, and level) into an SELinuxOptions object.

ValidInternalSecurityContextWithContainerDefaults creates a valid security context provider based on empty container defaults.

ValidSecurityContextWithContainerDefaults creates a valid security context provider based on empty container defaults.

PodSecurityContextAccessor allows reading the values of a PodSecurityContext object.

PodSecurityContextMutator allows reading and writing the values of a PodSecurityContext object.