Remove CAP_AUDIT_READ from docker-compose.yml (#13077) (#13108)

Some CentOS 7 jenkins workers have started failing because of this capability which does not exist in their kernel. But because we requet AUDIT_CONTROL it will be fine to run without AUDIT_READ. Cannot create container for service beat: invalid CapAdd: unknown capability: "CAP_AUDIT_READ" (cherry picked from commit 6629242)
elastic · Jul 30, 2019 · 65a0714 · 65a0714
1 parent c860f4c
commit 65a0714
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 2 deletions.
diff --git a/auditbeat/docker-compose.yml b/auditbeat/docker-compose.yml
@@ -19,7 +19,6 @@ services:
     pid: host
     cap_add:
       - AUDIT_CONTROL
-      - AUDIT_READ
 
   # This is a proxy used to block beats until all services are healthy.
   # See: https://github.com/docker/compose/issues/4369

diff --git a/x-pack/auditbeat/docker-compose.yml b/x-pack/auditbeat/docker-compose.yml
@@ -10,4 +10,3 @@ services:
     pid: host
     cap_add:
       - AUDIT_CONTROL
-      - AUDIT_READ