Skip to content

Commit 613956c

Browse files
maipbuisonic-otn
authored andcommitted
[docker-teamd] limit privileged flag for teamd container (sonic-net#15829)
Signed-off-by: Mai Bui <[email protected]>
1 parent 9422aec commit 613956c

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

rules/docker-teamd.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ SONIC_INSTALL_DOCKER_DBG_IMAGES += $(DOCKER_TEAMD_DBG)
3333
endif
3434

3535
$(DOCKER_TEAMD)_CONTAINER_NAME = teamd
36-
$(DOCKER_TEAMD)_RUN_OPT += --privileged -t
36+
$(DOCKER_TEAMD)_RUN_OPT += -t --cap-add=NET_ADMIN
3737
$(DOCKER_TEAMD)_RUN_OPT += -v /etc/sonic:/etc/sonic:ro
3838
$(DOCKER_TEAMD)_RUN_OPT += -v /etc/timezone:/etc/timezone:ro
3939
$(DOCKER_TEAMD)_RUN_OPT += -v /host/warmboot:/var/warmboot

0 commit comments

Comments
 (0)