mirror of
https://github.com/containers/podman.git
synced 2025-05-20 16:47:39 +08:00
Fix list of default capabilities
Fixes: https://github.com/containers/podman/issues/15626 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
@ -156,8 +156,8 @@ more.
|
||||
|
||||
When executing RUN instructions, run the command specified in the instruction
|
||||
with the specified capability removed from its capability set.
|
||||
The CAP\_AUDIT\_WRITE, CAP\_CHOWN, CAP\_DAC\_OVERRIDE, CAP\_FOWNER,
|
||||
CAP\_FSETID, CAP\_KILL, CAP\_MKNOD, CAP\_NET\_BIND\_SERVICE, CAP\_SETFCAP,
|
||||
The CAP\_CHOWN, CAP\_DAC\_OVERRIDE, CAP\_FOWNER,
|
||||
CAP\_FSETID, CAP\_KILL, CAP\_NET\_BIND\_SERVICE, CAP\_SETFCAP,
|
||||
CAP\_SETGID, CAP\_SETPCAP, CAP\_SETUID, and CAP\_SYS\_CHROOT capabilities are
|
||||
granted by default; this option can be used to remove them.
|
||||
|
||||
|
Reference in New Issue
Block a user