Kevin Wallace 42964a36b7 Allow non-privileged containers to create device nodes. ...

Such nodes could already be created by importing a tarball to a container; now
they can be created from within the container itself.

This gives non-privileged containers the mknod kernel capability, and modifies
their cgroup settings to allow creation of *any* node, not just whitelisted
ones.  Use of such nodes is still controlled by the existing cgroup whitelist.

Docker-DCO-1.1-Signed-off-by: Kevin Wallace <kevin@pentabarf.net> (github: kevinwallace)
Upstream-commit: c94111b61988ad32d87f99d4421cbcde018c3fb4
Component: engine

2014-04-03 18:44:13 +00:00

..

apply_nosystemd.go

cgroups: Add systemd implementation of cgroups

2014-03-27 22:44:31 +01:00

apply_raw.go

Allow non-privileged containers to create device nodes.

2014-04-03 18:44:13 +00:00

apply_systemd.go

cgroups: Add systemd implementation of cgroups

2014-03-27 22:44:31 +01:00

cgroups_test.go

Extract cgroups pkg.

2014-01-20 14:15:44 -05:00

cgroups.go

Fix compile and unit test errors after merge

2014-03-27 08:25:01 +00:00

MAINTAINERS

Extract cgroups pkg.

2014-01-20 14:15:44 -05:00