Browse code
Add CAP_NET_ADMIN Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
Michael Crosby authored on 2014/02/20 14:21:49Showing 2 changed files
| ... | ... |
@@ -21,6 +21,7 @@ var capMap = map[libcontainer.Capability]capability.Cap{
|
| 21 | 21 |
libcontainer.CAP_AUDIT_CONTROL: capability.CAP_AUDIT_CONTROL, |
| 22 | 22 |
libcontainer.CAP_MAC_OVERRIDE: capability.CAP_MAC_OVERRIDE, |
| 23 | 23 |
libcontainer.CAP_MAC_ADMIN: capability.CAP_MAC_ADMIN, |
| 24 |
+ libcontainer.CAP_NET_ADMIN: capability.CAP_NET_ADMIN, |
|
| 24 | 25 |
} |
| 25 | 26 |
|
| 26 | 27 |
// DropCapabilities drops capabilities for the current process based |
| ... | ... |
@@ -15,6 +15,7 @@ const ( |
| 15 | 15 |
CAP_AUDIT_CONTROL Capability = "AUDIT_CONTROL" |
| 16 | 16 |
CAP_MAC_OVERRIDE Capability = "MAC_OVERRIDE" |
| 17 | 17 |
CAP_MAC_ADMIN Capability = "MAC_ADMIN" |
| 18 |
+ CAP_NET_ADMIN Capability = "NET_ADMIN" |
|
| 18 | 19 |
|
| 19 | 20 |
CLONE_NEWNS Namespace = "NEWNS" // mount |
| 20 | 21 |
CLONE_NEWUTS Namespace = "NEWUTS" // utsname |