fedora: don't drop set_file_cap ...

Signed-off-by: Michael Adam <obnox@samba.org>
This commit is contained in:
Michael Adam 2016-04-28 11:32:07 +02:00
parent 2844899338
commit a4af7916e1

View file

@ -35,7 +35,8 @@ lxc.hook.clone = /usr/share/lxc/hooks/clonehostname
#lxc.cap.drop = setpcap #lxc.cap.drop = setpcap
# #
lxc.cap.drop = mac_admin mac_override lxc.cap.drop = mac_admin mac_override
lxc.cap.drop = setfcap # needed for httpd
#lxc.cap.drop = setfcap
lxc.cap.drop = sys_module sys_pacct lxc.cap.drop = sys_module sys_pacct
# sys_nice: needed to run CTDB # sys_nice: needed to run CTDB
#lxc.cap.drop = sys_nice sys_pacct #lxc.cap.drop = sys_nice sys_pacct