Explorar o código

Add AUDIT_WRITE cap

Fixes #6345

Thanks @larsks for outstanding investigation

Docker-DCO-1.1-Signed-off-by: Alexandr Morozov <lk4d4math@gmail.com> (github: LK4D4)
Alexandr Morozov %!s(int64=11) %!d(string=hai) anos
pai
achega
29ecc95c31
Modificáronse 1 ficheiros con 1 adicións e 0 borrados
  1. 1 0
      daemon/execdriver/native/template/default_template.go

+ 1 - 0
daemon/execdriver/native/template/default_template.go

@@ -23,6 +23,7 @@ func New() *libcontainer.Config {
 			"NET_BIND_SERVICE",
 			"SYS_CHROOT",
 			"KILL",
+			"AUDIT_WRITE",
 		},
 		Namespaces: map[string]bool{
 			"NEWNS":  true,