diff options
| author | OpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com> | 2018-11-30 11:09:51 -0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-11-30 11:09:51 -0800 |
| commit | b504623a1153c761604196dcd907cbdf165afa8b (patch) | |
| tree | d327f82c16ab2a6021828058fd0571fd55e97d73 /docs | |
| parent | 36364b18a97c6dc967c2cd36f34a672b9d102f0e (diff) | |
| parent | 3beacb73bced227b211bf3b8710382b94358614b (diff) | |
| download | podman-b504623a1153c761604196dcd907cbdf165afa8b.tar.gz podman-b504623a1153c761604196dcd907cbdf165afa8b.tar.bz2 podman-b504623a1153c761604196dcd907cbdf165afa8b.zip | |
Merge pull request #1317 from rhatdan/privileged
Disable mount options when running --privileged
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/podman-create.1.md | 7 | ||||
| -rw-r--r-- | docs/podman-run.1.md | 5 |
2 files changed, 7 insertions, 5 deletions
diff --git a/docs/podman-create.1.md b/docs/podman-create.1.md index 474796a35..6fbdd0d03 100644 --- a/docs/podman-create.1.md +++ b/docs/podman-create.1.md @@ -466,9 +466,10 @@ By default, podman containers are This is because by default a container is not allowed to access any devices. A “privileged” container is given access to all devices. -When the operator executes **podman run --privileged**, podman enables access -to all devices on the host as well as set turn off most of the security measures -protecting the host from the container. +When the operator executes a privileged container, podman enables access +to all devices on the host, turns off graphdriver mount options, as well as +turning off most of the security measures protecting the host from the +container. **-p**, **--publish**=[] diff --git a/docs/podman-run.1.md b/docs/podman-run.1.md index 202091b07..a6761a393 100644 --- a/docs/podman-run.1.md +++ b/docs/podman-run.1.md @@ -451,8 +451,9 @@ container is not allowed to access any devices. A “privileged” container is given access to all devices. When the operator executes **podman run --privileged**, podman enables access -to all devices on the host as well as set turn off most of the security measures -protecting the host from the container. +to all devices on the host, turns off graphdriver mount options, as well as +turning off most of the security measures protecting the host from the +container. **-p**, **--publish**=[] |