4 Commits

Author	SHA1	Message	Date
Michael Crosby	41f42a620b	Improve libcontainer namespace and cap format ... Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) Upstream-commit: db5f6b4aa0b34adbc9ba189a042e77e7bcdee681 Component: engine	2014-05-05 12:34:21 -07:00
Eiichi Tsukata	d33d261bde	drop CAP_SYSLOG capability ... Kernel capabilities for privileged syslog operations are currently splitted into CAP_SYS_ADMIN and CAP_SYSLOG since the following commit: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce6ada35bdf710d16582cc4869c26722547e6f11 This patch drops CAP_SYSLOG to prevent containers from messing with host's syslog (e.g. `dmesg -c` clears up host's printk ring buffer). Closes #5491 Docker-DCO-1.1-Signed-off-by: Eiichi Tsukata <devel@etsukata.com> (github: Etsukata) Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) Upstream-commit: cac0cea03f85191b3d92cdaeae827fdd93fb1b29 Component: engine	2014-05-01 11:43:55 -07:00
Guillaume J. Charmes	1ea14534fa	Merge branch 'master' into load-profile ... Conflicts: daemon/execdriver/native/create.go daemon/execdriver/native/driver.go Docker-DCO-1.1-Signed-off-by: Guillaume J. Charmes <guillaume@charmes.net> (github: creack) Upstream-commit: 813cebc64fb4b628e2938405d86144060c330eb9 Component: engine	2014-04-21 10:32:13 -07:00
Alexander Larsson	f7be50364d	Rename runtime/* to daemon/* ... Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com> (github: alexlarsson) Upstream-commit: 359b7df5d2af5733b8a1ea6746d062053053b23e Component: engine	2014-04-17 14:43:01 -07:00