From cbaa78cd8af48ca363bd03fce014bc8a2bb41ad9 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Mon, 5 Sep 2022 07:23:03 -0400 Subject: [PATCH] Fix list of default capabilities Fixes: https://github.com/containers/podman/issues/15626 Signed-off-by: Daniel J Walsh --- docs/source/markdown/podman-build.1.md.in | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/source/markdown/podman-build.1.md.in b/docs/source/markdown/podman-build.1.md.in index 693e0d3b90..5b05cc5c92 100644 --- a/docs/source/markdown/podman-build.1.md.in +++ b/docs/source/markdown/podman-build.1.md.in @@ -156,8 +156,8 @@ more. When executing RUN instructions, run the command specified in the instruction with the specified capability removed from its capability set. -The CAP\_AUDIT\_WRITE, CAP\_CHOWN, CAP\_DAC\_OVERRIDE, CAP\_FOWNER, -CAP\_FSETID, CAP\_KILL, CAP\_MKNOD, CAP\_NET\_BIND\_SERVICE, CAP\_SETFCAP, +The CAP\_CHOWN, CAP\_DAC\_OVERRIDE, CAP\_FOWNER, +CAP\_FSETID, CAP\_KILL, CAP\_NET\_BIND\_SERVICE, CAP\_SETFCAP, CAP\_SETGID, CAP\_SETPCAP, CAP\_SETUID, and CAP\_SYS\_CHROOT capabilities are granted by default; this option can be used to remove them.