mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-10-23 06:17:37 +00:00
bac907abf8
It was a bit unclear what setting it to empty means. Also, add to the tests verification that this works. Signed-off-by: Alexander Larsson <alexl@redhat.com>
11 lines
359 B
Text
11 lines
359 B
Text
## !assert-podman-args "--cap-drop=all"
|
|
## assert-podman-args "--cap-add=cap_dac_override"
|
|
## assert-podman-args "--cap-add=cap_audit_write"
|
|
## assert-podman-args "--cap-add=cap_ipc_owner"
|
|
|
|
[Container]
|
|
Image=imagename
|
|
# Verify that we can reset to the default cap set
|
|
DropCapability=
|
|
AddCapability=CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
|
|
AddCapability=CAP_IPC_OWNER
|