neil/lxc-templates
1
0
Fork 1
mirror of https://github.com/lxc/lxc-templates.git synced 2025-03-22 14:38:56 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #12 from kunkku/alpine-setpcap

Browse Source 
alpine: make dropping setpcap optional
This commit is contained in:
Stéphane Graber 2018-09-29 17:34:52 +02:00 committed by GitHub
commit ffccfe483b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/alpine.common.conf.in
View File

@ -8,7 +8,6 @@ lxc.tty.dir =
lxc.cap.drop = audit_write lxc.cap.drop = audit_write
lxc.cap.drop = ipc_owner lxc.cap.drop = ipc_owner
lxc.cap.drop = mknod lxc.cap.drop = mknod
lxc.cap.drop = setpcap
lxc.cap.drop = sys_nice lxc.cap.drop = sys_nice
lxc.cap.drop = sys_pacct lxc.cap.drop = sys_pacct
lxc.cap.drop = sys_rawio lxc.cap.drop = sys_rawio

3
templates/lxc-alpine.in
View File

@ -401,6 +401,9 @@ configure_container() {
# Comment this out if you have to debug processes by tracing. # Comment this out if you have to debug processes by tracing.
lxc.cap.drop = sys_ptrace lxc.cap.drop = sys_ptrace
# Comment this out if required by your applications.
lxc.cap.drop = setpcap
# Include common configuration. # Include common configuration.
lxc.include = $LXC_TEMPLATE_CONFIG/alpine.common.conf lxc.include = $LXC_TEMPLATE_CONFIG/alpine.common.conf
EOF EOF