From 72beea623fcf5e20843e6b05a6b19b4907a1bc77 Mon Sep 17 00:00:00 2001
From: Rob Rudin <rudin@progress.com>
Date: Wed, 14 Jan 2026 15:45:25 -0500
Subject: [PATCH] MLE-26598 Polaris fix in docker-compose file

---
 test-app/docker-compose.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/test-app/docker-compose.yml b/test-app/docker-compose.yml
index 6a2d1bb..2911b87 100644
--- a/test-app/docker-compose.yml
+++ b/test-app/docker-compose.yml
@@ -5,6 +5,10 @@ services:
   marklogic:
     image: "${MARKLOGIC_IMAGE}"
     platform: linux/amd64
+    # The NET_RAW capability allows a process to create raw sockets. Polaris does not like that.
+    # This setting removes the NET_RAW capability from the container.
+    cap_drop:
+      - NET_RAW
     environment:
       - INSTALL_CONVERTERS=true
       - MARKLOGIC_INIT=true