Kevin Wallace c94111b619 Allow non-privileged containers to create device nodes. ...

Such nodes could already be created by importing a tarball to a container; now
they can be created from within the container itself.

This gives non-privileged containers the mknod kernel capability, and modifies
their cgroup settings to allow creation of *any* node, not just whitelisted
ones.  Use of such nodes is still controlled by the existing cgroup whitelist.

Docker-DCO-1.1-Signed-off-by: Kevin Wallace <kevin@pentabarf.net> (github: kevinwallace)

2014-04-03 18:44:13 +00:00

..

apply_nosystemd.go

cgroups: Add systemd implementation of cgroups

2014-03-27 22:44:31 +01:00

apply_raw.go

Allow non-privileged containers to create device nodes.

2014-04-03 18:44:13 +00:00

apply_systemd.go

cgroups: Add systemd implementation of cgroups

2014-03-27 22:44:31 +01:00

cgroups_test.go

Extract cgroups pkg.

2014-01-20 14:15:44 -05:00

cgroups.go

Fix compile and unit test errors after merge

2014-03-27 08:25:01 +00:00

MAINTAINERS

Extract cgroups pkg.

2014-01-20 14:15:44 -05:00