Merge pull request #5907 from vmarmol/caps

Don't drop CAP_FOWNER in the container. Upstream-commit: a3a26cd349cc5f2776195e50c8857cd13dc15e22 Component: engine
2014-05-19 10:06:29 -07:00
parent 1bd174defc 4feffb64a0
commit 383cab0f3d
1 changed files with 5 additions and 4 deletions
@@ -10,12 +10,13 @@ import (
 func New() *libcontainer.Container {
 	container := &libcontainer.Container{
 		Capabilities: []string{
-			"MKNOD",
-			"SETUID",
-			"SETGID",
 			"CHOWN",
-			"NET_RAW",
 			"DAC_OVERRIDE",
+			"FOWNER",
+			"MKNOD",
+			"NET_RAW",
+			"SETGID",
+			"SETUID",
 		},
 		Namespaces: map[string]bool{
 			"NEWNS":  true,