Merge pull request #5907 from vmarmol/caps

Don't drop CAP_FOWNER in the container.
2026-04-12 06:19:22 +07:00 · 2014-05-19 10:06:29 -07:00
parent 265de539ff 0abad3ae22
commit a3a26cd349
1 changed files with 5 additions and 4 deletions
--- a/daemon/execdriver/native/template/default_template.go
+++ b/daemon/execdriver/native/template/default_template.go
@@ -10,12 +10,13 @@ import (
 func New() *libcontainer.Container {
 	container := &libcontainer.Container{
 		Capabilities: []string{
-			"MKNOD",
-			"SETUID",
-			"SETGID",
 			"CHOWN",
-			"NET_RAW",
 			"DAC_OVERRIDE",
+			"FOWNER",
+			"MKNOD",
+			"NET_RAW",
+			"SETGID",
+			"SETUID",
 		},
 		Namespaces: map[string]bool{
 			"NEWNS":  true,