From 4fbc4b8f79448d440c63dbdb25d4530c5a3b6fbc Mon Sep 17 00:00:00 2001 From: Ed Santiago Date: Tue, 6 Sep 2022 15:25:39 -0600 Subject: Man pages: refactor common options: --privileged An easy one. Went with the version from podman-run. Signed-off-by: Ed Santiago --- docs/source/markdown/options/privileged.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 docs/source/markdown/options/privileged.md (limited to 'docs/source/markdown/options') diff --git a/docs/source/markdown/options/privileged.md b/docs/source/markdown/options/privileged.md new file mode 100644 index 000000000..8d9746d6b --- /dev/null +++ b/docs/source/markdown/options/privileged.md @@ -0,0 +1,14 @@ +#### **--privileged** + +Give extended privileges to this container. The default is **false**. + +By default, Podman containers are unprivileged (**=false**) and cannot, for +example, modify parts of the operating system. This is because by default a +container is only allowed limited access to devices. A "privileged" container +is given the same access to devices as the user launching the container. + +A privileged container turns off the security features that isolate the +container from the host. Dropped Capabilities, limited devices, read-only mount +points, Apparmor/SELinux separation, and Seccomp filters are all disabled. + +Rootless containers cannot have more privileges than the account that launched them. -- cgit v1.2.3-54-g00ecf