Internal change.

PiperOrigin-RevId: 221343421
Change-Id: I418b5204c5ed4fe1e0af25ef36ee66b9b571928e

runsc/specutils/specutils.go

@@ -216,6 +216,21 @@ func Capabilities(specCaps *specs.LinuxCapabilities) (*auth.TaskCapabilities, er
 	return &caps, nil
 }
 
+// AllCapabilities returns a LinuxCapabilities struct with all capabilities.
+func AllCapabilities() *specs.LinuxCapabilities {
+	var names []string
+	for n := range capFromName {
+		names = append(names, n)
+	}
+	return &specs.LinuxCapabilities{
+		Bounding:    names,
+		Effective:   names,
+		Inheritable: names,
+		Permitted:   names,
+		Ambient:     names,
+	}
+}
+
 var capFromName = map[string]linux.Capability{
 	"CAP_CHOWN":            linux.CAP_CHOWN,
 	"CAP_DAC_OVERRIDE":     linux.CAP_DAC_OVERRIDE,

runsc/test/testutil/testutil.go

@@ -139,6 +139,7 @@ func NewSpecWithArgs(args ...string) *specs.Spec {
 			Env: []string{
 				"PATH=" + os.Getenv("PATH"),
 			},
+			Capabilities: specutils.AllCapabilities(),
 		},
 		Mounts: []specs.Mount{
 			// Root is readonly, but many tests want to write to tmpdir.