Add CAP_NET_ADMIN
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
This commit is contained in:
parent
3a97fe27d8
commit
e0ff0f4dd6
2 changed files with 2 additions and 0 deletions
|
@ -21,6 +21,7 @@ var capMap = map[libcontainer.Capability]capability.Cap{
|
|||
libcontainer.CAP_AUDIT_CONTROL: capability.CAP_AUDIT_CONTROL,
|
||||
libcontainer.CAP_MAC_OVERRIDE: capability.CAP_MAC_OVERRIDE,
|
||||
libcontainer.CAP_MAC_ADMIN: capability.CAP_MAC_ADMIN,
|
||||
libcontainer.CAP_NET_ADMIN: capability.CAP_NET_ADMIN,
|
||||
}
|
||||
|
||||
// DropCapabilities drops capabilities for the current process based
|
||||
|
|
|
@ -15,6 +15,7 @@ const (
|
|||
CAP_AUDIT_CONTROL Capability = "AUDIT_CONTROL"
|
||||
CAP_MAC_OVERRIDE Capability = "MAC_OVERRIDE"
|
||||
CAP_MAC_ADMIN Capability = "MAC_ADMIN"
|
||||
CAP_NET_ADMIN Capability = "NET_ADMIN"
|
||||
|
||||
CLONE_NEWNS Namespace = "NEWNS" // mount
|
||||
CLONE_NEWUTS Namespace = "NEWUTS" // utsname
|
||||
|
|
Loading…
Reference in a new issue