From e57cfc493a2bce5bb3e52df742de7c5ac123ba7c Mon Sep 17 00:00:00 2001 From: Disassembler Date: Wed, 18 Dec 2019 10:12:33 +0100 Subject: [PATCH] Don't drop sys_admin cap in unprivileged containers --- usr/lib/python3.6/lxcmgr/templates.py | 1 - 1 file changed, 1 deletion(-) diff --git a/usr/lib/python3.6/lxcmgr/templates.py b/usr/lib/python3.6/lxcmgr/templates.py index 8bda2ab..11ad81f 100644 --- a/usr/lib/python3.6/lxcmgr/templates.py +++ b/usr/lib/python3.6/lxcmgr/templates.py @@ -44,7 +44,6 @@ lxc.hook.post-stop = /usr/bin/lxchelper cleanup # Other lxc.arch = linux64 -lxc.cap.drop = sys_admin lxc.include = /usr/share/lxc/config/common.conf lxc.include = /usr/share/lxc/config/userns.conf '''