Skip to content
This repository has been archived by the owner on Feb 24, 2020. It is now read-only.

rkt run: give a new capability on the command line #2371

Closed
alban opened this issue Apr 4, 2016 · 1 comment
Closed

rkt run: give a new capability on the command line #2371

alban opened this issue Apr 4, 2016 · 1 comment
Labels
area/security area/usability component/stage0

Comments

@alban
Copy link
Member

alban commented Apr 4, 2016

New capabilities can be added in an ACI manifest with an isolator of type os/linux/capabilities-retain-set.

However, it is not possible to add one on the rkt run command line with:

$ rkt run ./myapp.aci --capability=CAP_IPC_LOCK

It would be useful to add.
@alban alban changed the title rkt run: give a new capability on the fly rkt run: give a new capability on the command line Apr 4, 2016
@lucab
Copy link
Member

lucab commented Jul 17, 2016

Fixed by #2771.

@lucab lucab closed this as completed Jul 17, 2016
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
area/security area/usability component/stage0
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@alban @lucab