Skip to content

specgen: permit --privileged and --cap-add#13744

Merged
openshift-merge-robot merged 1 commit intocontainers:mainfrom
giuseppe:allow-privileged-cap-add
Apr 1, 2022
Merged

specgen: permit --privileged and --cap-add#13744
openshift-merge-robot merged 1 commit intocontainers:mainfrom
giuseppe:allow-privileged-cap-add

Conversation

@giuseppe
Copy link
Copy Markdown
Member

@giuseppe giuseppe commented Apr 1, 2022

--cap-add is useful when running a privileged container with UID != 0,
so that individual capabilities can be added to the container process.

Closes: #13449

Signed-off-by: Giuseppe Scrivano gscrivan@redhat.com

--cap-add is useful when running a privileged container with UID != 0,
so that individual capabilities can be added to the container process.

Closes: containers#13449

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 1, 2022
@rhatdan
Copy link
Copy Markdown
Member

rhatdan commented Apr 1, 2022

LGTM

Copy link
Copy Markdown
Collaborator

@flouthoc flouthoc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 1, 2022

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: flouthoc, giuseppe

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@mheon
Copy link
Copy Markdown
Member

mheon commented Apr 1, 2022

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Apr 1, 2022
@openshift-merge-robot openshift-merge-robot merged commit 59fcf0e into containers:main Apr 1, 2022
@github-actions github-actions bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Sep 21, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 21, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Rootless] --privileged does not grant SYS_ADMIN to non-UID-0

5 participants