feat(container): add sysctls setting in the container view EE-43 (#280)

This commit is contained in:
Hui
2021-04-29 11:07:48 +12:00
committed by GitHub
parent 933177948d
commit 5596a3bc99
12 changed files with 145 additions and 23 deletions
+4
View File
@@ -165,6 +165,10 @@ func (handler *Handler) isValidStackFile(stackFileContent []byte, securitySettin
return errors.New("device mapping disabled for non administrator users")
}
if !securitySettings.AllowSysctlSettingForRegularUsers && service.Sysctls != nil && len(service.Sysctls) > 0 {
return errors.New("sysctl setting disabled for non administrator users")
}
if !securitySettings.AllowContainerCapabilitiesForRegularUsers && (len(service.CapAdd) > 0 || len(service.CapDrop) > 0) {
return errors.New("container capabilities disabled for non administrator users")
}