Fix bst-here
diff --git a/contrib/bst-here b/contrib/bst-here
index 6b4e6b2..a88a635 100755
--- a/contrib/bst-here
+++ b/contrib/bst-here
@@ -66,12 +66,16 @@
 
 exec docker run --rm -i${is_tty:+ -t} \
                 --cap-add SYS_ADMIN \
+                --cap-add SYS_CHROOT \
+                --cap-add NET_ADMIN \
+                --cap-add SETUID \
+                --cap-add SETGID \
                 --env PS1="$BST_HERE_PS1" \
                 --device /dev/fuse \
                 --security-opt seccomp=unconfined \
                 --volume buildstream-cache:/root/.cache/buildstream \
                 --volume buildstream-config:/root/.config \
-                --volume "$PWD":/src \
+                --volume "$PWD":/src:Z \
                 --workdir /src \
                 buildstream/buildstream-fedora:latest \
                 $command