mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
Add CAP_KILL to unprivileged containers
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
This commit is contained in:
parent
f7e4546af0
commit
fa72eb3a58
1 changed files with 1 additions and 0 deletions
|
@ -21,6 +21,7 @@ func New() *libcontainer.Container {
|
|||
"SETPCAP",
|
||||
"NET_BIND_SERVICE",
|
||||
"SYS_CHROOT",
|
||||
"KILL",
|
||||
},
|
||||
Namespaces: map[string]bool{
|
||||
"NEWNS": true,
|
||||
|
|
Loading…
Reference in a new issue