From edabe8f2d33cd20b5b392290ef0725f9b3a9b298 Mon Sep 17 00:00:00 2001
From: Rob Rudin <rudin@progress.com>
Date: Tue, 14 Oct 2025 15:06:29 -0400
Subject: [PATCH] MLE-24685 Fixing Polaris issue in Docker file

---
 docker-compose.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker-compose.yaml b/docker-compose.yaml
index 8d0f2352..c40c010d 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -5,6 +5,10 @@ services:
   marklogic:
     image: "${MARKLOGIC_IMAGE}"
     platform: linux/amd64
+    # The NET_RAW capability allows a process to create raw sockets. Polaris does not like that.
+    # This setting removes the NET_RAW capability from the container.
+    cap_drop:
+      - NET_RAW
     environment:
       - INSTALL_CONVERTERS=true
       - MARKLOGIC_INIT=true