{"action":"closed","issue":{"url":"https://api.github.com/repos/adelton/docker-freeipa/issues/36","labels_url":"https://api.github.com/repos/adelton/docker-freeipa/issues/36/labels{/name}","comments_url":"https://api.github.com/repos/adelton/docker-freeipa/issues/36/comments","events_url":"https://api.github.com/repos/adelton/docker-freeipa/issues/36/events","html_url":"https://github.com/adelton/docker-freeipa/issues/36","id":109335904,"number":36,"title":"Implement full grsec support?","user":{"login":"ninja-","id":5637961,"avatar_url":"https://avatars.githubusercontent.com/u/5637961?v=3","gravatar_id":"","url":"https://api.github.com/users/ninja-","html_url":"https://github.com/ninja-","followers_url":"https://api.github.com/users/ninja-/followers","following_url":"https://api.github.com/users/ninja-/following{/other_user}","gists_url":"https://api.github.com/users/ninja-/gists{/gist_id}","starred_url":"https://api.github.com/users/ninja-/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ninja-/subscriptions","organizations_url":"https://api.github.com/users/ninja-/orgs","repos_url":"https://api.github.com/users/ninja-/repos","events_url":"https://api.github.com/users/ninja-/events{/privacy}","received_events_url":"https://api.github.com/users/ninja-/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-10-01T16:26:38Z","updated_at":"2015-11-08T17:37:58Z","closed_at":"2015-11-08T17:37:58Z","body":"```\r\ngrsec: use of CAP_SETFCAP in chroot denied for /usr/bin/docker[exe:22977] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/docker[docker:21162] uid/euid:0/0 gid/egid:0/0\r\n```\r\n\r\nsadly...\r\nis there a way for the container to work without the caps?\r\nwhat's the reasoning behind \"--cap-add=SYS_TIME\"?"}}