From 4f6cc66699c152b584f376db60c168c7da02285c Mon Sep 17 00:00:00 2001 From: Michael Crosby Date: Sat, 7 Jun 2014 15:18:18 -0700 Subject: [PATCH] Add CAP_KILL to unprivileged containers Docker-DCO-1.1-Signed-off-by: Michael Crosby (github: crosbymichael) Upstream-commit: fa72eb3a58ebfec8ef1b27d8e7aa8cbdb41733a2 Component: engine --- .../engine/daemon/execdriver/native/template/default_template.go | 1 + 1 file changed, 1 insertion(+) diff --git a/components/engine/daemon/execdriver/native/template/default_template.go b/components/engine/daemon/execdriver/native/template/default_template.go index e7d3143df9..3488b2084e 100644 --- a/components/engine/daemon/execdriver/native/template/default_template.go +++ b/components/engine/daemon/execdriver/native/template/default_template.go @@ -21,6 +21,7 @@ func New() *libcontainer.Container { "SETPCAP", "NET_BIND_SERVICE", "SYS_CHROOT", + "KILL", }, Namespaces: map[string]bool{ "NEWNS": true,