search

aws / amazon-ecs-init

ecs-init is now part of the amazon-ecs-agent repo https://github.com/aws/amazon-ecs-agent/tree/master/ecs-init
https://github.com/aws/amazon-ecs-agent
Apache License 2.0
200 stars 118 forks source link

Add the CAP_CHOWN capability to support running rootless #507

Closed aws-gibbskt closed 2 years ago

aws-gibbskt commented 2 years ago

Summary

EcsInit needs to be able to change the ownership of files/directories for ServiceConnect and potentially existing features as well. This ensures it can do that even if running rootless.

Implementation details

Add CAP_CHOWN to list of privileged capabilities.

Licensing

This contribution is under the terms of the Apache 2.0 License: