fix: harden container privileges

This commit is contained in:
lingkai5wu committed 2026-10-16 15:11:17 +08:00
1 parent abbcdb1a02
commit 6e02bd39ae
11 files changed
+51

No files matched your search

+2
View File
@@ -68,6 +68,8 @@ docker_args=(
run
--rm
--network "container:$CONTAINER"
--cap-drop ALL
--security-opt no-new-privileges:true
--cap-add NET_RAW
--cap-add NET_ADMIN
)