diff options
Diffstat (limited to 'sandbox/container.go')
| -rw-r--r-- | sandbox/container.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sandbox/container.go b/sandbox/container.go index 70929bb1..f2595c38 100644 --- a/sandbox/container.go +++ b/sandbox/container.go @@ -165,7 +165,7 @@ func (p *Container) Start() error { syscall.CLONE_NEWNS, // remain privileged for setup - AmbientCaps: []uintptr{CAP_SYS_ADMIN}, + AmbientCaps: []uintptr{CAP_SYS_ADMIN, CAP_SETPCAP}, UseCgroupFD: p.Cgroup != nil, } |