Merge pull request #6258 from crosbymichael/capkill

Add CAP_KILL to unprivileged containers
2026-09-05 05:01:28 +00:00 · 2014-06-08 01:37:28 +03:00
parent 94dc07c044 fa72eb3a58
commit a2c08792f0
1 changed files with 1 additions and 0 deletions
@@ -21,6 +21,7 @@ func New() *libcontainer.Container {
 			"SETPCAP",
 			"NET_BIND_SERVICE",
 			"SYS_CHROOT",
+			"KILL",
 		},
 		Namespaces: map[string]bool{
 			"NEWNS":  true,