add fail2ban as example container for testing purposes

Signed-off-by: Simon L <szaimen@e.mail.de>
This commit is contained in:
Simon L 2023-05-31 12:00:44 +02:00
parent c320da2b0e
commit f221ab7655
6 changed files with 41 additions and 3 deletions

View file

@ -477,7 +477,9 @@ class DockerActionManager
}
// Disable arp spoofing
$requestBody['HostConfig']['CapDrop'] = ['NET_RAW'];
if (!in_array('NET_RAW', $capAdds, true)) {
$requestBody['HostConfig']['CapDrop'] = ['NET_RAW'];
}
if ($container->isApparmorUnconfined()) {
$requestBody['HostConfig']['SecurityOpt'] = ["apparmor:unconfined"];