Skip to content
This repository has been archived by the owner on Mar 28, 2018. It is now read-only.

Capabilities support: Clear Container should honor valid capability requests through --cap-add and --cap- #913

Open
mcastelino opened this issue May 17, 2017 · 1 comment
Open

Capabilities support: Clear Container should honor valid capability requests through --cap-add and --cap- #913

mcastelino opened this issue May 17, 2017 · 1 comment
Labels
CC 2.1

Comments

@mcastelino
Copy link
Contributor

Docker supports limited capability elevation for container workloads without resorting to privileged mode.

For example:

docker run -it --rm --cap-add=NET_ADMIN ubuntu ip link add dummy0 type dummy

There is a need to support limited capability elevation for the workload, even if it is limited to elevated capabilities inside the virtual machine hosting the workload.
@mcastelino
Copy link
Contributor Author

cc @egernst

@egernst egernst added the CC 2.1 label Jul 18, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
CC 2.1
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@mcastelino @egernst