lxc: add capabilities for C/R

Signed-off-by: Michel Normand <normand@fr.ibm.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

diff --git a/src/lxc/lxc-setcap.in b/src/lxc/lxc-setcap.in
index c92666d8a3b3c992f1c592471e652104114fa43e..4731035b97e9129931f18bd173cd1587d5f764ac 100644 (file)
--- a/src/lxc/lxc-setcap.in
+++ b/src/lxc/lxc-setcap.in
@@ -32,8 +32,8 @@ LXC_COMMON_CAPS="cap_net_admin,cap_net_raw,cap_sys_admin,cap_dac_override"
 LXC_UNSHARE_CAPS=$LXC_COMMON_CAPS
 LXC_START_CAPS="$LXC_COMMON_CAPS,cap_fowner,cap_sys_chroot,cap_setpcap"
 LXC_EXECUTE_CAPS=$LXC_START_CAPS
-LXC_RESTART_CAPS=$LXC_START_CAPS
-LXC_CHECKPOINT_CAPS="$LXC_COMMON_CAPS,cap_sys_ptrace"
+LXC_RESTART_CAPS="$LXC_START_CAPS,cap_mknod"
+LXC_CHECKPOINT_CAPS="$LXC_COMMON_CAPS,cap_sys_ptrace,cap_mknod"
 
 LXC_DROP_CAPS=""