Merge pull request #6171 from crosbymichael/add-chroot

Add SYS_CHROOT cap to unprivileged containers Upstream-commit: 5bf4068d60222b1fdfc997e498aa2096b8df3cf9 Component: engine
2014-06-02 18:33:34 -07:00
parent 6017cb1878 382f8a23ad
commit f363828126
2 changed files with 13 additions and 0 deletions
@@ -20,6 +20,7 @@ func New() *libcontainer.Container {
 			"SETFCAP",
 			"SETPCAP",
 			"NET_BIND_SERVICE",
+			"SYS_CHROOT",
 		},
 		Namespaces: map[string]bool{
 			"NEWNS":  true,