add FSETID back to the caps whitelist
@@ -12,6 +12,7 @@ func New() *libcontainer.Config {
Capabilities: []string{
"CHOWN",
"DAC_OVERRIDE",
+ "FSETID",
"FOWNER",
"MKNOD",
"NET_RAW",