From da9850e0f6db619f2d3a8f31e91c71a5fa1ad040 Mon Sep 17 00:00:00 2001 From: Alexandr Morozov Date: Wed, 23 Jul 2014 09:57:41 +0400 Subject: [PATCH] Add AUDIT_WRITE cap Fixes #6345 Thanks @larsks for outstanding investigation Docker-DCO-1.1-Signed-off-by: Alexandr Morozov (github: LK4D4) Upstream-commit: 29ecc95c31ecfe15e3b3d8db94cea1c555e526a3 Component: engine --- .../engine/daemon/execdriver/native/template/default_template.go | 1 + 1 file changed, 1 insertion(+) diff --git a/components/engine/daemon/execdriver/native/template/default_template.go b/components/engine/daemon/execdriver/native/template/default_template.go index cc5cc4f428..be3dd5a5c1 100644 --- a/components/engine/daemon/execdriver/native/template/default_template.go +++ b/components/engine/daemon/execdriver/native/template/default_template.go @@ -23,6 +23,7 @@ func New() *libcontainer.Config { "NET_BIND_SERVICE", "SYS_CHROOT", "KILL", + "AUDIT_WRITE", }, Namespaces: map[string]bool{ "NEWNS": true,