Michael Crosby bd709ba8cb fix: default to restricted OCI capability set (#786) ...

Changes the default Linux capability set for container processes from
`.allCapabilities` to `.defaultOCICapabilities`, making the library
secure-by-default. Callers that genuinely need elevated capabilities
must now opt in explicitly.

Signed-off-by: michael_crosby <michael_crosby@apple.com>

2026-07-02 12:45:15 -04:00

..

BridgeCommand.swift

Add cloud-hypervisor VMM backend for Linux hosts (#782)

2026-07-02 11:20:22 -04:00

cctl.swift

Add cloud-hypervisor VMM backend for Linux hosts (#782)

2026-07-02 11:20:22 -04:00

cctl+Utils.swift

Update license header on all files to include the current year (#470)

2026-01-05 13:08:48 -08:00

ImageCommand.swift

Add cloud-hypervisor VMM backend for Linux hosts (#782)

2026-07-02 11:20:22 -04:00

KernelCommand.swift

Update license header on all files to include the current year (#470)

2026-01-05 13:08:48 -08:00

LoginCommand.swift

make default goal compile on Linux (#648)

2026-04-06 11:13:16 -07:00

RootfsCommand.swift

Add progress handler for rootfs unpacking (#515)

2026-04-02 17:33:55 -07:00

RunCommand.swift

fix: default to restricted OCI capability set (#786)

2026-07-02 12:45:15 -04:00