summaryrefslogtreecommitdiff
path: root/docs/source/markdown/options
diff options
context:
space:
mode:
authorEd Santiago <santiago@redhat.com>2022-09-06 15:25:39 -0600
committerEd Santiago <santiago@redhat.com>2022-09-07 06:41:44 -0600
commit4fbc4b8f79448d440c63dbdb25d4530c5a3b6fbc (patch)
tree0e41a0cb3eb7a9ceb3ab502d384bf718811f91c3 /docs/source/markdown/options
parent7946628734ba7cf866fcc8445b00f7dd8d9b245c (diff)
downloadpodman-4fbc4b8f79448d440c63dbdb25d4530c5a3b6fbc.tar.gz
podman-4fbc4b8f79448d440c63dbdb25d4530c5a3b6fbc.tar.bz2
podman-4fbc4b8f79448d440c63dbdb25d4530c5a3b6fbc.zip
Man pages: refactor common options: --privileged
An easy one. Went with the version from podman-run. Signed-off-by: Ed Santiago <santiago@redhat.com>
Diffstat (limited to 'docs/source/markdown/options')
-rw-r--r--docs/source/markdown/options/privileged.md14
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/source/markdown/options/privileged.md b/docs/source/markdown/options/privileged.md
new file mode 100644
index 000000000..8d9746d6b
--- /dev/null
+++ b/docs/source/markdown/options/privileged.md
@@ -0,0 +1,14 @@
+#### **--privileged**
+
+Give extended privileges to this container. The default is **false**.
+
+By default, Podman containers are unprivileged (**=false**) and cannot, for
+example, modify parts of the operating system. This is because by default a
+container is only allowed limited access to devices. A "privileged" container
+is given the same access to devices as the user launching the container.
+
+A privileged container turns off the security features that isolate the
+container from the host. Dropped Capabilities, limited devices, read-only mount
+points, Apparmor/SELinux separation, and Seccomp filters are all disabled.
+
+Rootless containers cannot have more privileges than the account that launched them.