From c95e51ff06f78533b80e87dd3fd4a3bf214cc3c2 Mon Sep 17 00:00:00 2001
From: Rob Rudin <rudin@progress.com>
Date: Mon, 25 Aug 2025 09:53:23 -0400
Subject: [PATCH] MLE-12345 Polaris fixes

Not sure how it's reporting on files under ".kotlin", so hopefully the gitignore addition will prevent that.
---
 .gitignore          | 2 ++
 docker-compose.yaml | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/.gitignore b/.gitignore
index 1bf7c14e2..bfa99a5f5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -38,3 +38,5 @@ ml-development-tools/src/test/java/com/marklogic/client/test/dbfunction/generate
 
 .vscode
 docker/
+
+.kotlin
diff --git a/docker-compose.yaml b/docker-compose.yaml
index 4a851837e..569f62b3f 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -10,6 +10,10 @@ services:
       - MARKLOGIC_INIT=true
       - MARKLOGIC_ADMIN_USERNAME=admin
       - MARKLOGIC_ADMIN_PASSWORD=admin
+    # The NET_RAW capability allows a process to create raw sockets. Polaris does not like that.
+    # This setting removes the NET_RAW capability from the container.
+    cap_drop:
+      - NET_RAW
     volumes:
       - ${MARKLOGIC_LOGS_VOLUME}:/var/opt/MarkLogic/Logs
     ports: