diff --git a/daemon/execdriver/lxc/init.go b/daemon/execdriver/lxc/init.go index 324bd5eff7..52d75fc9f8 100644 --- a/daemon/execdriver/lxc/init.go +++ b/daemon/execdriver/lxc/init.go @@ -149,6 +149,7 @@ func setupCapabilities(args *execdriver.InitArgs) error { capability.CAP_MAC_OVERRIDE, capability.CAP_MAC_ADMIN, capability.CAP_NET_ADMIN, + capability.CAP_SYSLOG, } c, err := capability.NewPid(os.Getpid()) diff --git a/daemon/execdriver/native/template/default_template.go b/daemon/execdriver/native/template/default_template.go index c354637fcb..5dbe21ecb0 100644 --- a/daemon/execdriver/native/template/default_template.go +++ b/daemon/execdriver/native/template/default_template.go @@ -25,6 +25,7 @@ func New() *libcontainer.Container { libcontainer.GetCapability("MAC_ADMIN"), libcontainer.GetCapability("NET_ADMIN"), libcontainer.GetCapability("MKNOD"), + libcontainer.GetCapability("SYSLOG"), }, Namespaces: libcontainer.Namespaces{ libcontainer.GetNamespace("NEWNS"), diff --git a/pkg/libcontainer/container.json b/pkg/libcontainer/container.json index f15a49ab05..20c1121911 100644 --- a/pkg/libcontainer/container.json +++ b/pkg/libcontainer/container.json @@ -91,6 +91,11 @@ "value" : 27, "key" : "MKNOD", "enabled" : true + }, + { + "value" : 34, + "key" : "SYSLOG", + "enabled" : false } ], "networks" : [ diff --git a/pkg/libcontainer/types.go b/pkg/libcontainer/types.go index ade3c32f1d..f5fe6cffa9 100644 --- a/pkg/libcontainer/types.go +++ b/pkg/libcontainer/types.go @@ -53,6 +53,7 @@ var ( {Key: "MAC_OVERRIDE", Value: capability.CAP_MAC_OVERRIDE, Enabled: false}, {Key: "MAC_ADMIN", Value: capability.CAP_MAC_ADMIN, Enabled: false}, {Key: "NET_ADMIN", Value: capability.CAP_NET_ADMIN, Enabled: false}, + {Key: "SYSLOG", Value: capability.CAP_SYSLOG, Enabled: false}, } )