From 61bfcfd82a937d318c9fabfd7fec3b3d54d06292 Mon Sep 17 00:00:00 2001 From: Mrunal Patel Date: Tue, 16 Feb 2016 03:54:58 -0800 Subject: [PATCH] Add libcontainer configuration for NoNewPrivileges Signed-off-by: Mrunal Patel --- libcontainer/configs/config.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libcontainer/configs/config.go b/libcontainer/configs/config.go index 069daae29..f6a163b73 100644 --- a/libcontainer/configs/config.go +++ b/libcontainer/configs/config.go @@ -171,6 +171,9 @@ type Config struct { // A default action to be taken if no rules match is also given. Seccomp *Seccomp `json:"seccomp"` + // NoNewPrivileges controls whether processes in the container can gain additional privileges. + NoNewPrivileges bool `json:"no_new_privileges"` + // Hooks are a collection of actions to perform at various container lifecycle events. // Hooks are not able to be marshaled to json but they are also not needed to. Hooks *Hooks `json:"-"`