Add CAP_KILL to unprivileged containers

Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) Upstream-commit: fa72eb3a58ebfec8ef1b27d8e7aa8cbdb41733a2 Component: engine
2014-06-07 15:18:18 -07:00
parent 63e43e0a44
commit 4f6cc66699
1 changed files with 1 additions and 0 deletions
@@ -21,6 +21,7 @@ func New() *libcontainer.Container {
 			"SETPCAP",
 			"NET_BIND_SERVICE",
 			"SYS_CHROOT",
+			"KILL",
 		},
 		Namespaces: map[string]bool{
 			"NEWNS":  true,