public KernelCapabilities withDrop(String... drop) {
        if (this.drop == null) {
            setDrop(new com.amazonaws.internal.SdkInternalList<String>(drop.length));
        }
        for (String ele : drop) {
            this.drop.add(ele);
        }
        return this;
    }
public KernelCapabilities withDrop ( String ... drop ) { if ( this . drop == null ) { setDrop ( new com . amazonaws . internal . SdkInternalList < String > ( drop . length ) ) ; } for ( String ele : drop ) { this . drop . add ( ele ) ; } return this ; }
<p>
The Linux capabilities for the container that have been removed from the default configuration provided by
Docker. This parameter maps to <code>CapDrop</code> in the <a
href="https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate">Create a container</a> section of the
<a href="https://docs.docker.com/engine/api/v1.35/">Docker Remote API</a> and the <code>--cap-drop</code> option
to <a href="https://docs.docker.com/engine/reference/run/">docker run</a>.
</p>
<p>
Valid values:
<code>"ALL" | "AUDIT_CONTROL" | "AUDIT_WRITE" | "BLOCK_SUSPEND" | "CHOWN" | "DAC_OVERRIDE" | "DAC_READ_SEARCH" | "FOWNER" | "FSETID" | "IPC_LOCK" | "IPC_OWNER" | "KILL" | "LEASE" | "LINUX_IMMUTABLE" | "MAC_ADMIN" | "MAC_OVERRIDE" | "MKNOD" | "NET_ADMIN" | "NET_BIND_SERVICE" | "NET_BROADCAST" | "NET_RAW" | "SETFCAP" | "SETGID" | "SETPCAP" | "SETUID" | "SYS_ADMIN" | "SYS_BOOT" | "SYS_CHROOT" | "SYS_MODULE" | "SYS_NICE" | "SYS_PACCT" | "SYS_PTRACE" | "SYS_RAWIO" | "SYS_RESOURCE" | "SYS_TIME" | "SYS_TTY_CONFIG" | "SYSLOG" | "WAKE_ALARM"</code>
</p>
<p>
<b>NOTE:</b> This method appends the values to the existing list (if any). Use
{@link #setDrop(java.util.Collection)} or {@link #withDrop(java.util.Collection)} if you want to override the
existing values.
</p>

@param drop
The Linux capabilities for the container that have been removed from the default configuration provided by
Docker. This parameter maps to <code>CapDrop</code> in the <a
href="https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate">Create a container</a> section
of the <a href="https://docs.docker.com/engine/api/v1.35/">Docker Remote API</a> and the
<code>--cap-drop</code> option to <a href="https://docs.docker.com/engine/reference/run/">docker
run</a>.</p>
<p>
Valid values:
<code>"ALL" | "AUDIT_CONTROL" | "AUDIT_WRITE" | "BLOCK_SUSPEND" | "CHOWN" | "DAC_OVERRIDE" | "DAC_READ_SEARCH" | "FOWNER" | "FSETID" | "IPC_LOCK" | "IPC_OWNER" | "KILL" | "LEASE" | "LINUX_IMMUTABLE" | "MAC_ADMIN" | "MAC_OVERRIDE" | "MKNOD" | "NET_ADMIN" | "NET_BIND_SERVICE" | "NET_BROADCAST" | "NET_RAW" | "SETFCAP" | "SETGID" | "SETPCAP" | "SETUID" | "SYS_ADMIN" | "SYS_BOOT" | "SYS_CHROOT" | "SYS_MODULE" | "SYS_NICE" | "SYS_PACCT" | "SYS_PTRACE" | "SYS_RAWIO" | "SYS_RESOURCE" | "SYS_TIME" | "SYS_TTY_CONFIG" | "SYSLOG" | "WAKE_ALARM"</code>
@return Returns a reference to this object so that method calls can be chained together.