Skip to content

Commit f1eacac

Browse files
authored
Update k8s-best-practices-linux-capabilities.adoc
1 parent d8f18e2 commit f1eacac

File tree

1 file changed

+0
-8
lines changed

1 file changed

+0
-8
lines changed

modules/k8s-best-practices-linux-capabilities.adoc

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -10,14 +10,6 @@ Users may choose to specify the required permissions for their running applicati
1010

1111
The following runtime and SCC attributes control the capabilities that will be granted to a new container:
1212

13-
* The capabilities granted to the CRI-O engine. The default capabilities are listed here: link:https://github.com/cri-o/cri-o/blob/master/internal/config/capabilities/capabilities.go[]
14-
+
15-
[NOTE]
16-
====
17-
As of Kubernetes version 1.18, CRI-O no longer runs with NET_RAW or SYS_CHROOT by default.
18-
link:https://cri-o.github.io/cri-o/v1.18.0.html[]
19-
====
20-
2113
* The values in the SCC for `allowedCapabilities`, `defaultAddCapabilities` and `requiredDropCapabilities`
2214

2315
* `allowPrivilegeEscalation`: controls whether a container can acquire extra privileges through setuid binaries or the file capabilities of binaries

0 commit comments

Comments
 (0)