diff --git a/daemon/execdriver/native/template/default_template.go b/daemon/execdriver/native/template/default_template.go index 66cfa88a3a..5c41603428 100644 --- a/daemon/execdriver/native/template/default_template.go +++ b/daemon/execdriver/native/template/default_template.go @@ -10,12 +10,13 @@ import ( func New() *libcontainer.Container { container := &libcontainer.Container{ Capabilities: []string{ - "MKNOD", - "SETUID", - "SETGID", "CHOWN", - "NET_RAW", "DAC_OVERRIDE", + "FOWNER", + "MKNOD", + "NET_RAW", + "SETGID", + "SETUID", }, Namespaces: map[string]bool{ "NEWNS": true,