mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
Add CAP_KILL to unprivileged containers
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
This commit is contained in:
parent
f7e4546af0
commit
fa72eb3a58
1 changed files with 1 additions and 0 deletions
|
@ -21,6 +21,7 @@ func New() *libcontainer.Container {
|
||||||
"SETPCAP",
|
"SETPCAP",
|
||||||
"NET_BIND_SERVICE",
|
"NET_BIND_SERVICE",
|
||||||
"SYS_CHROOT",
|
"SYS_CHROOT",
|
||||||
|
"KILL",
|
||||||
},
|
},
|
||||||
Namespaces: map[string]bool{
|
Namespaces: map[string]bool{
|
||||||
"NEWNS": true,
|
"NEWNS": true,
|
||||||
|
|
Loading…
Reference in a new issue