chiark / gitweb /
nspawn: Allow module loading if CAP_SYS_MODULE is requested
authorJay Faulkner <jay@jvf.cc>
Wed, 4 Feb 2015 01:45:50 +0000 (17:45 -0800)
committerLennart Poettering <lennart@poettering.net>
Wed, 4 Feb 2015 12:34:46 +0000 (13:34 +0100)
commitd0a0ccf3fecdb422d3fb7ab89646fe9042f11acd
treebcf30e2e588e220bafd1adc480e36485fbb5bad6
parent057255fbbf2ecb1c46e025b04087fa9340d9880d
nspawn: Allow module loading if CAP_SYS_MODULE is requested

nspawn containers currently block module loading in all cases, with
no option to disable it. This allows an admin, specifically setting
capability=CAP_SYS_MODULE or capability=all to load modules.
src/nspawn/nspawn.c