mirror of
https://github.com/containers/skopeo.git
synced 2025-08-31 06:10:50 +00:00
unshare: Add CAP_SYS_ADMIN to needed capabilities
Some container storage operations (e.g., mounting the home directory for containers/storage) require CAP_SYS_ADMIN. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
This commit is contained in:
@@ -16,6 +16,7 @@ var neededCapabilities = []capability.Cap{
|
|||||||
capability.CAP_FSETID,
|
capability.CAP_FSETID,
|
||||||
capability.CAP_MKNOD,
|
capability.CAP_MKNOD,
|
||||||
capability.CAP_SETFCAP,
|
capability.CAP_SETFCAP,
|
||||||
|
capability.CAP_SYS_ADMIN,
|
||||||
}
|
}
|
||||||
|
|
||||||
func maybeReexec() error {
|
func maybeReexec() error {
|
||||||
|
Reference in New Issue
Block a user