kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity
moby--moby/daemon/execdriver/lxc
History
Eiichi Tsukata cac0cea03f drop CAP_SYSLOG capability 
Kernel capabilities for privileged syslog operations are currently splitted into
CAP_SYS_ADMIN and CAP_SYSLOG since the following commit:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce6ada35bdf710d16582cc4869c26722547e6f11

This patch drops CAP_SYSLOG to prevent containers from messing with
host's syslog (e.g. `dmesg -c` clears up host's printk ring buffer).

Closes #5491

Docker-DCO-1.1-Signed-off-by: Eiichi Tsukata <devel@etsukata.com> (github: Etsukata)
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
2014-05-01 11:43:55 -07:00
..
driver.go Close extraneous file descriptors in containers 2014-04-29 16:45:28 -06:00
info.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
info_test.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
init.go drop CAP_SYSLOG capability 2014-05-01 11:43:55 -07:00
lxc_init_linux.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
lxc_init_unsupported.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00
lxc_template.go No not mount sysfs by default for non privilged containers 2014-04-24 10:35:20 -07:00
lxc_template_unit_test.go Rename runtime/* to daemon/* 2014-04-17 14:43:01 -07:00