From f1a53d611604482db975b312f4eeb6a81ea95ce5 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Fri, 8 Aug 2025 00:43:19 +0900 Subject: container: raise CAP_DAC_OVERRIDE This is required for upperdir and workdir checks in overlayfs. Signed-off-by: Ophestra --- container/capability.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'container/capability.go') diff --git a/container/capability.go b/container/capability.go index 7c36ce9e..fda2fb2a 100644 --- a/container/capability.go +++ b/container/capability.go @@ -12,8 +12,9 @@ const ( PR_CAP_AMBIENT_RAISE = 0x2 PR_CAP_AMBIENT_CLEAR_ALL = 0x4 - CAP_SYS_ADMIN = 0x15 - CAP_SETPCAP = 0x8 + CAP_SYS_ADMIN = 0x15 + CAP_SETPCAP = 0x8 + CAP_DAC_OVERRIDE = 0x1 ) type ( -- cgit v1.3.1