From: Michel Normand <normand@fr.ibm.com>
Date: Tue, 19 Jan 2010 17:45:16 +0000 (+0100)
Subject: lxc: add capabilities for C/R
X-Git-Tag: lxc-0.6.5~14
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8b7329af3fa876aacd6b0299f4d86e76cd3b14a5;p=thirdparty%2Flxc.git

lxc: add capabilities for C/R

Signed-off-by: Michel Normand <normand@fr.ibm.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
---

diff --git a/src/lxc/lxc-setcap.in b/src/lxc/lxc-setcap.in
index c92666d8a..4731035b9 100644
--- a/src/lxc/lxc-setcap.in
+++ b/src/lxc/lxc-setcap.in
@@ -32,8 +32,8 @@ LXC_COMMON_CAPS="cap_net_admin,cap_net_raw,cap_sys_admin,cap_dac_override"
 LXC_UNSHARE_CAPS=$LXC_COMMON_CAPS
 LXC_START_CAPS="$LXC_COMMON_CAPS,cap_fowner,cap_sys_chroot,cap_setpcap"
 LXC_EXECUTE_CAPS=$LXC_START_CAPS
-LXC_RESTART_CAPS=$LXC_START_CAPS
-LXC_CHECKPOINT_CAPS="$LXC_COMMON_CAPS,cap_sys_ptrace"
+LXC_RESTART_CAPS="$LXC_START_CAPS,cap_mknod"
+LXC_CHECKPOINT_CAPS="$LXC_COMMON_CAPS,cap_sys_ptrace,cap_mknod"
 
 LXC_DROP_CAPS=""