Merge branch 'mehdi/box-permissions'

Closes MR !14
2017-08-14 10:48:48 -07:00
parent 2048b03431 d0f4a76ca2
commit 26361c037d
3 changed files with 13 additions and 5 deletions
@@ -209,6 +209,14 @@ function createSubcontainer(app, name, cmd, options, callback) {
                SecurityOpt: enableSecurityOpt ? [ "apparmor=docker-cloudron-app" ] : null // profile available only on cloudron
            }
        };
+
+        var capabilities = manifest.capabilities || [];
+        if (capabilities.includes('net_admin')) {
+            containerOptions.HostConfig.CapAdd = [
+                'NET_ADMIN'
+            ];
+        }
+
        containerOptions = _.extend(containerOptions, options);

        debugApp(app, 'Creating container for %s with options %j', app.manifest.dockerImage, containerOptions);