fedora: don't drop the sys_nice capability to support running ctdb

diff --git a/conf/fedora b/conf/fedora
index 7027b6bb183d55c5454e30d515920372fd5a358e..e73a343cc540712564fb278ae3f5dd871dc35185 100644 (file)
--- a/conf/fedora
+++ b/conf/fedora
@@ -36,7 +36,9 @@ lxc.hook.clone = /usr/share/lxc/hooks/clonehostname
 #
 lxc.cap.drop = mac_admin mac_override
 lxc.cap.drop = setfcap
-lxc.cap.drop = sys_module sys_nice sys_pacct
+lxc.cap.drop = sys_module sys_pacct
+# sys_nice: needed to run CTDB
+#lxc.cap.drop = sys_nice sys_pacct
 lxc.cap.drop = sys_rawio sys_time
 
 # Control Group devices: all denied except those whitelisted