Add file capabilities to kernel options

Point users in documentation to also enable POSIX capability for
dropping CAP_BOOT.

Signed-off-by: Filippo Giunchedi <filippo@esaurito.net>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

diff --git a/doc/lxc.sgml.in b/doc/lxc.sgml.in
index 41ba06774ed9d1abbc7ff3d5245a395eece2153c..77795a54c49c810d1bdfeb266307bdeb89a5ff63 100644 (file)
--- a/doc/lxc.sgml.in
+++ b/doc/lxc.sgml.in
@@ -121,6 +121,8 @@ Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
                -> User namespace
                -> Pid namespace
                -> Network namespace
+           * Security options
+             -> File POSIX Capabilities
       </programlisting>
 
       <para>