Get rid of dropping capabilities as this prevents gaining relevant ones in the container
This commit is contained in:
parent
f01ce872e8
commit
fc55e2c59a
1 changed files with 0 additions and 4 deletions
|
|
@ -80,10 +80,6 @@ void LxcContainer::start(const Configuration &configuration) {
|
|||
if (container_->is_running(container_)) container_->stop(container_);
|
||||
}
|
||||
|
||||
// We drop all not needed capabilities
|
||||
set_config_item("lxc.cap.drop",
|
||||
"mac_admin mac_override sys_time sys_module sys_rawio");
|
||||
|
||||
// We can mount proc/sys as rw here as we will run the container unprivileged
|
||||
// in the end
|
||||
set_config_item("lxc.mount.auto", "proc:mixed sys:mixed cgroup:mixed");
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue