mirror of
https://github.com/containers/podman.git
synced 2025-05-21 17:16:22 +08:00
Fix list of default capabilities
Fixes: https://github.com/containers/podman/issues/15626 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
@ -156,8 +156,8 @@ more.
|
|||||||
|
|
||||||
When executing RUN instructions, run the command specified in the instruction
|
When executing RUN instructions, run the command specified in the instruction
|
||||||
with the specified capability removed from its capability set.
|
with the specified capability removed from its capability set.
|
||||||
The CAP\_AUDIT\_WRITE, CAP\_CHOWN, CAP\_DAC\_OVERRIDE, CAP\_FOWNER,
|
The CAP\_CHOWN, CAP\_DAC\_OVERRIDE, CAP\_FOWNER,
|
||||||
CAP\_FSETID, CAP\_KILL, CAP\_MKNOD, CAP\_NET\_BIND\_SERVICE, CAP\_SETFCAP,
|
CAP\_FSETID, CAP\_KILL, CAP\_NET\_BIND\_SERVICE, CAP\_SETFCAP,
|
||||||
CAP\_SETGID, CAP\_SETPCAP, CAP\_SETUID, and CAP\_SYS\_CHROOT capabilities are
|
CAP\_SETGID, CAP\_SETPCAP, CAP\_SETUID, and CAP\_SYS\_CHROOT capabilities are
|
||||||
granted by default; this option can be used to remove them.
|
granted by default; this option can be used to remove them.
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user