From f80fd5da09013d7cd25a0f246ffffd7b6c064073 Mon Sep 17 00:00:00 2001 From: Michael Crosby Date: Wed, 2 Apr 2014 13:07:11 +0000 Subject: [PATCH] Fix configuration test for MKNOD Docker-DCO-1.1-Signed-off-by: Michael Crosby (github: crosbymichael) --- runtime/execdriver/native/template/default_template.go | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/runtime/execdriver/native/template/default_template.go b/runtime/execdriver/native/template/default_template.go index 6828812336..a1ecb04d76 100644 --- a/runtime/execdriver/native/template/default_template.go +++ b/runtime/execdriver/native/template/default_template.go @@ -7,7 +7,7 @@ import ( // New returns the docker default configuration for libcontainer func New() *libcontainer.Container { - return &libcontainer.Container{ + container := &libcontainer.Container{ CapabilitiesMask: libcontainer.Capabilities{ libcontainer.GetCapability("SETPCAP"), libcontainer.GetCapability("SYS_MODULE"), @@ -23,6 +23,7 @@ func New() *libcontainer.Container { libcontainer.GetCapability("MAC_OVERRIDE"), libcontainer.GetCapability("MAC_ADMIN"), libcontainer.GetCapability("NET_ADMIN"), + libcontainer.GetCapability("MKNOD"), }, Namespaces: libcontainer.Namespaces{ libcontainer.GetNamespace("NEWNS"), @@ -39,4 +40,6 @@ func New() *libcontainer.Container { "apparmor_profile": "docker-default", }, } + container.CapabilitiesMask.Get("MKNOD").Enabled = true + return container }