Merge pull request #6258 from crosbymichael/capkill

Add CAP_KILL to unprivileged containers
This commit is contained in:
unclejack 2014-06-08 01:37:28 +03:00
commit a2c08792f0
1 changed files with 1 additions and 0 deletions

View File

@ -21,6 +21,7 @@ func New() *libcontainer.Container {
"SETPCAP", "SETPCAP",
"NET_BIND_SERVICE", "NET_BIND_SERVICE",
"SYS_CHROOT", "SYS_CHROOT",
"KILL",
}, },
Namespaces: map[string]bool{ Namespaces: map[string]bool{
"NEWNS": true, "NEWNS": true,