mirror of
https://github.com/hanzoai/visor.git
synced 2026-09-24 17:04:14 +00:00
Ayush RanjanandgVisor bot
5c0d948556
This allows writing capabilities only to "security.capability" within the security namespace. In goferfs, this is disallowed to prevent writes from propagating to the underlying host filesystem. PiperOrigin-RevId: 756009863
6 lines
94 B
Docker
6 lines
94 B
Docker
FROM alpine
|
|
|
|
RUN apk add libcap
|
|
|
|
RUN cp /bin/cat /mnt/cat && setcap cap_net_admin+ep /mnt/cat
|