Merge pull request #5930 from alexlarsson/add-cap-setfcap

native driver: Don't drop SETFCAP Upstream-commit: e5202de9186a2548c54af54739a6cb09046afd61 Component: engine
2014-05-20 10:29:37 -07:00
parent 2c2ee20fef da7177cbfd
commit ae6d266785
1 changed files with 3 additions and 0 deletions
--- a/components/engine/daemon/execdriver/native/template/default_template.go
+++ b/components/engine/daemon/execdriver/native/template/default_template.go
@ -17,6 +17,9 @@ func New() *libcontainer.Container {
 			"NET_RAW",
 			"SETGID",
 			"SETUID",
+			"SETFCAP",
+			"SETPCAP",
+			"NET_BIND_SERVICE",
 		},
 		Namespaces: map[string]bool{
 			"NEWNS":  true,