Merge pull request #9548 from mheon/fix_1930552

[v1.6.4-rhel] Fix RHBZ#1930552
containers · Mar 1, 2021 · bcbbbc4 · bcbbbc4
2 parents 7da9ac5 + fbc96cd
commit bcbbbc4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libpod/oci_conmon_linux.go b/libpod/oci_conmon_linux.go
@@ -1107,7 +1107,7 @@ func prepareProcessExec(c *Container, cmd, env []string, tty bool, cwd, user, se
 	pspec.Capabilities.Effective = []string{}
 	if privileged {
 		pspec.Capabilities.Bounding = allCaps
-	} else {
+	} else if execUser.Uid != 0 {
 		pspec.Capabilities.Bounding = []string{}
 	}
 	pspec.Capabilities.Inheritable = pspec.Capabilities.Bounding