Add SYS_CHROOT cap to unprivileged containers

Fixes #6103 Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
2026-09-04 20:51:44 +00:00 · 2014-06-02 18:23:47 -07:00
parent f65fadbda0
commit 41f7cef2bd
2 changed files with 13 additions and 0 deletions
@@ -20,6 +20,7 @@ func New() *libcontainer.Container {
 			"SETFCAP",
 			"SETPCAP",
 			"NET_BIND_SERVICE",
+			"SYS_CHROOT",
 		},
 		Namespaces: map[string]bool{
 			"NEWNS":  true,