Add AUDIT_WRITE cap
@@ -23,6 +23,7 @@ func New() *libcontainer.Config {
"NET_BIND_SERVICE",
"SYS_CHROOT",
"KILL",
+ "AUDIT_WRITE",
},
Namespaces: map[string]bool{
"NEWNS": true,