Merge pull request #6258 from crosbymichael/capkill

Add CAP_KILL to unprivileged containers Upstream-commit: a2c08792f0e8477c0c185b93f7d20d59ae74e3ad Component: engine
2014-06-08 01:37:28 +03:00
parent 51a1bf0d7b 4f6cc66699
commit 7eb900ab44
1 changed files with 1 additions and 0 deletions
--- a/components/engine/daemon/execdriver/native/template/default_template.go
+++ b/components/engine/daemon/execdriver/native/template/default_template.go
@ -21,6 +21,7 @@ func New() *libcontainer.Container {
 			"SETPCAP",
 			"NET_BIND_SERVICE",
 			"SYS_CHROOT",
+			"KILL",
 		},
 		Namespaces: map[string]bool{
 			"NEWNS":  true,