templates: Update templates and try to get rid with CAP_SYS_ADMIN (#1134)

- The use of CAP_SYS_ADMIN can be avoided in Kernel Manager, but cannot
be avoided in Root Explorer because it's needed for mounting RW/RO.
- Capabilities adjustment
- Fix template typo

---------

Signed-off-by: Rem01Gaming <Rem01_Gaming@proton.me>
This commit is contained in:
Rem01Gaming
2023-11-13 12:24:54 +07:00
committed by GitHub
parent b658d820a1
commit 8fdff569d6
2 changed files with 7 additions and 4 deletions

View File

@@ -6,13 +6,15 @@
"uid":0,
"gid":0,
"groups":[
"ROOT"
"ROOT",
"READPROC"
],
"capabilities":[
"CAP_SYS_ADMIN",
"CAP_SYS_MODULE",
"CAP_SYS_NICE",
"CAP_SYS_RESOURCE",
"CAP_KILL",
"CAP_SYSLOG",
"CAP_PERFMON"
],
"context":"u:r:su:s0",

View File

@@ -9,8 +9,9 @@
"ROOT"
],
"capabilities":[
"CAP_SYS_ADMIN",
"CAP_DAC_OVERRIDE"
"CAP_DAC_READ_SEARCH",
"CAP_DAC_OVERRIDE",
"CAP_SYS_ADMIN"
],
"context":"u:r:su:s0",
"namespace":"INHERITED",