Update system/xattrs_linux.go

- Add Llistxattr() support
- Additionally cleanup Lgetxattr() and implement it properly
  in accordance with getxattr() syscall behavior.

Signed-off-by: Harshavardhana <fharshav@redhat.com>
xattr/xattr.go: Add new higher level helpers for xattr

Signed-off-by: Harshavardhana <fharshav@redhat.com>
Merge pull request #202 from harshavardhana/xattr_list_xattr

Update system/xattrs_linux.go
Introduce more entropy in veth name generation

The current 4 chars are not enough, bumped to 7

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Add loop for veth pair creation on ErrInterfaceExists

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Merge pull request #212 from crosbymichael/veth-naming

Add more entropy to veth pair creation
Fix "go install -v . ./.git/logs/refs/heads ./.git/refs/heads ..."

This happens when you name a git object (branch, tag, etc) `something_test.go`.

Signed-off-by: Andrew Page <admwiggin@gmail.com>
Merge pull request #213 from tianon/crosbymichael_test.go

Fix "go install -v . ./.git/logs/refs/heads ./.git/refs/heads ..."
pkg/cgroups: Export ParseCgroupFile

This is needed for the libvirt exec driver.

Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com> (github: alexlarsson)
Docker-DCO-1.1-Signed-off-by: Josh Poimboeuf <jpoimboe@redhat.com> (github: jpoimboe)
Merge pull request #216 from cbosdo/master

cgroups: Export ParseCgroupFile
Do not check if SELinux is enabled on lowlevel calls to set processlabel

docker exec changes the mount namespace which fools selinux bindings
into thinking SELinux is disabled.  Bindings should just check if
a label is passed in and attempt to use it.  Docker will not call these
functions with a label if SELinux is disabled.

Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)
Merge pull request #222 from rhatdan/exec

Do not check if SELinux is enabled on lowlevel calls to set processlabel
Set apparmor profile in execin

The set of the apparmor profile for the setns codepath was missing.
Selinux was being called but apparmor was forgotten.  This was causing
no profiles to be applied to the extra process spawn inside an existing
container.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Merge pull request #224 from crosbymichael/set-apparmor-execin

Set apparmor profile in execin
Create an ApplyDevices call.

For our work on adding dynamic device support to Docker we needed to be
able to call this to update the list of allowed devices.  This works for
both systemd and fs based cgroups implementations.

Co-Authored-By: Chris Alfonso <calfonso@redhat.com> (github: calfonso)
Docker-DCO-1.1-Signed-off-by: Ian Main <imain@redhat.com> (github: imain)