mirror of
https://github.com/containers/podman.git
synced 2026-01-29 16:31:45 -05:00
a9f0957c24
You can still use multiple lines, but this is not necessary. Signed-off-by: Alexander Larsson <alexl@redhat.com>
10 lines
308 B
Plaintext
10 lines
308 B
Plaintext
## !assert-podman-args "--cap-drop=all"
|
|
## assert-podman-args "--cap-drop=cap_dac_override"
|
|
## assert-podman-args "--cap-drop=cap_audit_write"
|
|
## assert-podman-args "--cap-drop=cap_ipc_owner"
|
|
|
|
[Container]
|
|
Image=localhost/imagename
|
|
DropCapability=CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
|
|
DropCapability=CAP_IPC_OWNER
|