1. docker
  2. Commit fa72eb3a58ebfec8ef1b27d8e7aa8cbdb41733a2
Browse code

Add CAP_KILL to unprivileged containers Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)

Michael Crosby authored on 2014/06/08 07:18:18
Showing 1 changed files
daemon/execdriver/native/template/default_template.go
History View file @ fa72eb3
... ... 
@@ -21,6 +21,7 @@ func New() *libcontainer.Container {
21 21 
 			"SETPCAP",
22 22 
 			"NET_BIND_SERVICE",
23 23 
 			"SYS_CHROOT",
24 
+			"KILL",
24 25 
 		},
25 26 
 		Namespaces: map[string]bool{
26 27 
 			"NEWNS":  true,