@@ -65,7 +65,13 @@ func (d *Driver) createContainer(ctx context.Context, c *execdriver.Command, hoo

 			return nil, err

 		}

 	}

-

+	// add CAP_ prefix to all caps for new libcontainer update to match

+	// the spec format.

+	for i, s := range container.Capabilities {

+		if !strings.HasPrefix(s, "CAP_") {

+			container.Capabilities[i] = fmt.Sprintf("CAP_%s", s)

+		}

+	}

 	container.AdditionalGroups = c.GroupAdd

 	if c.AppArmorProfile != "" {

@@ -6,6 +6,7 @@ import (

 	"fmt"

 	"os"

 	"os/exec"

+	"strings"

 	"syscall"

 	"github.com/docker/docker/context"

@@ -36,6 +37,13 @@ func (d *Driver) Exec(ctx context.Context, c *execdriver.Command, processConfig

 	if processConfig.Privileged {

 		p.Capabilities = execdriver.GetAllCapabilities()

 	}

+	// add CAP_ prefix to all caps for new libcontainer update to match

+	// the spec format.

+	for i, s := range p.Capabilities {

+		if !strings.HasPrefix(s, "CAP_") {

+			p.Capabilities[i] = fmt.Sprintf("CAP_%s", s)

+		}

+	}

 	config := active.Config()

 	if err := setupPipes(&config, processConfig, p, pipes); err != nil {

@@ -119,6 +119,5 @@ func TweakCapabilities(basics, adds, drops []string) ([]string, error) {

 			newCaps = append(newCaps, strings.ToUpper(cap))

 		}

 	}

-

 	return newCaps, nil

 }