config: add CAP_SETFCAP to the default capabilities

[giuseppe]

it is needed by Buildah to set file capabilities.

Signed-off-by: Giuseppe Scrivano gscrivan@redhat.com

More details here: podman-container-tools/buildah#2176

[rhatdan]

Would it be better to add this directly to buildah rather then make podman have it by default?

[giuseppe]

Would it be better to add this directly to buildah rather then make podman have it by default?

AFAICS, podman already has it by default:

$ podman run --rm -ti fedora getpcaps 1
Capabilities for `1': = cap_chown,cap_dac_override,cap_fowner,cap_fsetid,cap_kill,cap_setgid,cap_setuid,cap_setpcap,cap_net_bind_service,cap_net_raw,cap_sys_chroot,cap_mknod,cap_audit_write,cap_setfcap+eip

In the original issue, it was reported that the same Dockerfile works through Podman since the capability is present

[rhatdan]

Ok, maybe I removed it by accident. It should be the same as the Docker defaults.