3 ms·
For #2 did you mean CAP_NET_RAW or CAP_SYS_RAWIO?
by waittrtwut 9y ago
For #2 did you mean CAP_NET_RAW or CAP_SYS_RAWIO?
- bthornbury 9y agoCAP_SYS_RAWIO looks even more terrifying, but CAP_NET_RAW gates your ability to use raw sockets. https://linux.die.net/man/7/capabilities https://linux.die.net/man/7/capabilities
- contingencies 9y agoI raised this stuff in 2014. https://github.com/moby/moby/issues/5661 https://github.com/moby/moby/issues/5661