mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-11-02 17:17:33 +00:00
7ec743fe74
These are both slow (trigger loading alias files) and risky (its not clear which image you mean). Signed-off-by: Alexander Larsson <alexl@redhat.com>
11 lines
369 B
Text
11 lines
369 B
Text
## !assert-podman-args "--cap-drop=all"
|
|
## assert-podman-args "--cap-add=cap_dac_override"
|
|
## assert-podman-args "--cap-add=cap_audit_write"
|
|
## assert-podman-args "--cap-add=cap_ipc_owner"
|
|
|
|
[Container]
|
|
Image=localhost/imagename
|
|
# Verify that we can reset to the default cap set
|
|
DropCapability=
|
|
AddCapability=CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
|
|
AddCapability=CAP_IPC_OWNER
|