docker-cli

Files

Eiichi Tsukata d33d261bde drop CAP_SYSLOG capability

Kernel capabilities for privileged syslog operations are currently splitted into
CAP_SYS_ADMIN and CAP_SYSLOG since the following commit:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce6ada35bdf710d16582cc4869c26722547e6f11

This patch drops CAP_SYSLOG to prevent containers from messing with
host's syslog (e.g. `dmesg -c` clears up host's printk ring buffer).

Closes #5491

Docker-DCO-1.1-Signed-off-by: Eiichi Tsukata <devel@etsukata.com> (github: Etsukata)
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
Upstream-commit: cac0cea03f85191b3d92cdaeae827fdd93fb1b29
Component: engine

2014-05-01 11:43:55 -07:00

configuration

Separating cgroup Memory and MemoryReservation.

2014-04-24 11:09:38 -07:00

template

drop CAP_SYSLOG capability

2014-05-01 11:43:55 -07:00

create.go

Initial work on selinux patch

2014-04-29 03:40:05 -07:00

driver.go

Make native driver use Exec func with different CreateCommand