Maintain a whitelist of capabilities rather than droplist

This fixes 6/18 vulnerability

Docker-DCO-1.1-Signed-off-by: Dinesh Subhraveti <dineshs@altiscale.com> (github: dineshs-altiscale)
Use libcontainer cap drop method

Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@docker.com> (github: crosbymichael)
Update close fd issues for lxc

Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@docker.com> (github: crosbymichael)
Fix dyntest and rename it to dyntest-unit to match the test-unit rename

Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
Merge pull request #6527 from subhraveti/cap-whitelist

Maintain a whitelist of capabilities rather than droplist
Merge pull request #6554 from tianon/fix-dyntest

Fix dyntest and rename it to dyntest-unit to match the test-unit rename
Update libcontainer dep to v1.0.1
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@docker.com> (github: crosbymichael)
Merge pull request #6557 from crosbymichael/update-libcontainer-1.0.1

Update libcontainer dep to v1.0.1