add --privileged to docker command.

To run this program, you need --privileged for mounting
/tmp/nsjail.root.

diff --git a/README.md b/README.md
index 9b556c80179a819b6e860b5845c8e30957056139..acdbe308896e1a07df58c69a03685965fb1f0cc4 100644 (file)
--- a/README.md
+++ b/README.md
@@ -476,5 +476,5 @@ This will build up an image containing njsail and kafel.
 
 From now you can either use it in another Dockerfile (`FROM nsjail`) or directly:
 <pre>
-docker run --rm -it nsjail nsjail --user 99999 --group 99999 --disable_proc --chroot / --time_limit 30 /bin/bash
+docker run --privileged --rm -it nsjail nsjail --user 99999 --group 99999 --disable_proc --chroot / --time_limit 30 /bin/bash
 </pre>