Add CAP_NET_ADMIN
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
This commit is contained in:
		
							parent
							
								
									3ded9b431a
								
							
						
					
					
						commit
						ca0e7f087c
					
				
					 2 changed files with 2 additions and 0 deletions
				
			
		|  | @ -21,6 +21,7 @@ var capMap = map[libcontainer.Capability]capability.Cap{ | |||
| 	libcontainer.CAP_AUDIT_CONTROL:  capability.CAP_AUDIT_CONTROL, | ||||
| 	libcontainer.CAP_MAC_OVERRIDE:   capability.CAP_MAC_OVERRIDE, | ||||
| 	libcontainer.CAP_MAC_ADMIN:      capability.CAP_MAC_ADMIN, | ||||
| 	libcontainer.CAP_NET_ADMIN:      capability.CAP_NET_ADMIN, | ||||
| } | ||||
| 
 | ||||
| // DropCapabilities drops capabilities for the current process based | ||||
|  |  | |||
|  | @ -15,6 +15,7 @@ const ( | |||
| 	CAP_AUDIT_CONTROL  Capability = "AUDIT_CONTROL" | ||||
| 	CAP_MAC_OVERRIDE   Capability = "MAC_OVERRIDE" | ||||
| 	CAP_MAC_ADMIN      Capability = "MAC_ADMIN" | ||||
| 	CAP_NET_ADMIN      Capability = "NET_ADMIN" | ||||
| 
 | ||||
| 	CLONE_NEWNS   Namespace = "NEWNS"   // mount | ||||
| 	CLONE_NEWUTS  Namespace = "NEWUTS"  // utsname | ||||
|  |  | |||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue