mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-10 21:53:57 +08:00
Add CAP_NET_ADMIN
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
This commit is contained in:
@@ -21,6 +21,7 @@ var capMap = map[libcontainer.Capability]capability.Cap{
|
||||
libcontainer.CAP_AUDIT_CONTROL: capability.CAP_AUDIT_CONTROL,
|
||||
libcontainer.CAP_MAC_OVERRIDE: capability.CAP_MAC_OVERRIDE,
|
||||
libcontainer.CAP_MAC_ADMIN: capability.CAP_MAC_ADMIN,
|
||||
libcontainer.CAP_NET_ADMIN: capability.CAP_NET_ADMIN,
|
||||
}
|
||||
|
||||
// DropCapabilities drops capabilities for the current process based
|
||||
|
||||
@@ -15,6 +15,7 @@ const (
|
||||
CAP_AUDIT_CONTROL Capability = "AUDIT_CONTROL"
|
||||
CAP_MAC_OVERRIDE Capability = "MAC_OVERRIDE"
|
||||
CAP_MAC_ADMIN Capability = "MAC_ADMIN"
|
||||
CAP_NET_ADMIN Capability = "NET_ADMIN"
|
||||
|
||||
CLONE_NEWNS Namespace = "NEWNS" // mount
|
||||
CLONE_NEWUTS Namespace = "NEWUTS" // utsname
|
||||
|
||||
Reference in New Issue
Block a user