From 184e9db2b2ee960e7c7b2014aec72a28d9110bcc Mon Sep 17 00:00:00 2001
From: Ophestra <cat@gensokyo.uk>
Date: Thu, 27 Mar 2025 19:40:19 +0900
Subject: sandbox: support privileged container

Signed-off-by: Ophestra <cat@gensokyo.uk>
---
 sandbox/container.go | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'sandbox/container.go')

diff --git a/sandbox/container.go b/sandbox/container.go
index f2595c38..58c9749d 100644
--- a/sandbox/container.go
+++ b/sandbox/container.go
@@ -99,6 +99,8 @@ type (
 		// Permission bits of newly created parent directories.
 		// The zero value is interpreted as 0755.
 		ParentPerm os.FileMode
+		// Retain CAP_SYS_ADMIN.
+		Privileged bool
 
 		Flags HardeningFlags
 	}
-- 
cgit v1.3.1