cba2eef566
Such nodes could already be created by importing a tarball to a container; now they can be created from within the container itself. This gives non-privileged containers the mknod kernel capability, and modifies their cgroup settings to allow creation of *any* node, not just whitelisted ones. Use of such nodes is still controlled by the existing cgroup whitelist. Docker-DCO-1.1-Signed-off-by: Kevin Wallace <kevin@pentabarf.net> (github: kevinwallace) |
||
---|---|---|
.. | ||
apply_nosystemd.go | ||
apply_raw.go | ||
apply_systemd.go | ||
cgroups.go | ||
cgroups_test.go | ||
MAINTAINERS |