From e7fbf329c206397b77f39b60e1bed0c8b9de45c6 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Fri, 24 Aug 2018 05:47:37 -0400 Subject: Reveal information about container capabilities I am often asked about the list of capabilities availabel to a container. We should be listing this data in the inspect command for effective capabilities and the bounding set. Signed-off-by: Daniel J Walsh Closes: #1335 Approved by: TomSweeneyRedHat --- docs/podman-inspect.1.md | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'docs') diff --git a/docs/podman-inspect.1.md b/docs/podman-inspect.1.md index 47a189e39..ef68e929c 100644 --- a/docs/podman-inspect.1.md +++ b/docs/podman-inspect.1.md @@ -96,6 +96,11 @@ overlay size: 4405240 ``` +``` +podman inspect --latest --format {{.EffectiveCaps}} +[CAP_CHOWN CAP_DAC_OVERRIDE CAP_FSETID CAP_FOWNER CAP_MKNOD CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SETFCAP CAP_SETPCAP CAP_NET_BIND_SERVICE CAP_SYS_CHROOT CAP_KILL CAP_AUDIT_WRITE] +``` + ## SEE ALSO podman(1) -- cgit v1.2.3-54-g00ecf