From b4750d8d812f66159222fe8909f85cdcb6af5fa0 Mon Sep 17 00:00:00 2001
From: Robert Schmidt <robert.schmidt@openairinterface.org>
Date: Tue, 23 Apr 2024 09:33:10 +0200
Subject: [PATCH] Use capabilities in AW2S-based docker compose

---
 ci-scripts/yaml_files/sa_aw2s_gnb/docker-compose.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ci-scripts/yaml_files/sa_aw2s_gnb/docker-compose.yml b/ci-scripts/yaml_files/sa_aw2s_gnb/docker-compose.yml
index 40b0837168..9e0fcce062 100644
--- a/ci-scripts/yaml_files/sa_aw2s_gnb/docker-compose.yml
+++ b/ci-scripts/yaml_files/sa_aw2s_gnb/docker-compose.yml
@@ -1,9 +1,13 @@
 services:
     oai-gnb:
         image: oai-gnb-aw2s:latest
-        privileged: true
         network_mode: "host"
         container_name: oai-gnb-aw2s
+        cap_drop:
+            - ALL
+        cap_add:
+            - SYS_NICE
+            - IPC_LOCK
         ulimits:
           core: -1 # for core dumps
         environment: