mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-07-20 01:29:07 +00:00
auditd: move config into build.yml
Signed-off-by: Ian Campbell <ijc@docker.com>
This commit is contained in:
parent
c2a4b6d08e
commit
de242facca
@ -25,5 +25,3 @@ COPY audit.rules /etc/audit
|
|||||||
COPY runaudit.sh /usr/bin
|
COPY runaudit.sh /usr/bin
|
||||||
|
|
||||||
CMD ["/sbin/tini", "/usr/bin/runaudit.sh"]
|
CMD ["/sbin/tini", "/usr/bin/runaudit.sh"]
|
||||||
|
|
||||||
LABEL org.mobyproject.config='{"pid": "host", "binds": ["/var/log:/var/log"], "capabilities": ["CAP_AUDIT_CONTROL", "CAP_AUDIT_READ", "CAP_AUDIT_WRITE", "CAP_SYS_NICE"]}'
|
|
||||||
|
@ -1,2 +1,11 @@
|
|||||||
image: auditd
|
image: auditd
|
||||||
network: true
|
network: true
|
||||||
|
config:
|
||||||
|
pid: host
|
||||||
|
binds:
|
||||||
|
- /var/log:/var/log
|
||||||
|
capabilities:
|
||||||
|
- CAP_AUDIT_CONTROL
|
||||||
|
- CAP_AUDIT_READ
|
||||||
|
- CAP_AUDIT_WRITE
|
||||||
|
- CAP_SYS_NICE
|
||||||
|
Loading…
Reference in New Issue
Block a user