1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00

Add CAP_KILL to unprivileged containers

Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
This commit is contained in:
Michael Crosby 2014-06-07 15:18:18 -07:00
parent f7e4546af0
commit fa72eb3a58

View file

@ -21,6 +21,7 @@ func New() *libcontainer.Container {
"SETPCAP", "SETPCAP",
"NET_BIND_SERVICE", "NET_BIND_SERVICE",
"SYS_CHROOT", "SYS_CHROOT",
"KILL",
}, },
Namespaces: map[string]bool{ Namespaces: map[string]bool{
"NEWNS": true, "NEWNS": true,