miragesdk: remove CAP_SYS_PTRACE
Since we don't need this anymore.
kernel:
image: "mobylinux/kernel:4.9.x"
cmdline: "console=ttyS0 page_poison=1"
-init: "mobylinux/init:5770b8f1c72d3b9da43951d4ce3b53d473e3dc8b"
+init: "mobylinux/init:9d755f7e7d108d523448e4a503f1613b7d870389@sha256:9ccb16f2d8b3a09d12f5459106763f1836c064e420a13360e2e25599337960dc"
system:
- name: sysctl
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
@@ -31,7 +31,6 @@ daemon:
- CAP_NET_RAW # to read /dev/eth0
- CAP_SYS_ADMIN # for runc (unshare)
- CAP_SETGID # for runc (setns)
- - CAP_SYS_PTRACE # for runc (read /proc/[pid]/fd)
mounts: # for runc
- type: cgroup
options: ["rw","nosuid","noexec","nodev","relatime"]
