templates: Update templates and try to get rid with CAP_SYS_ADMIN (#1134)
- The use of CAP_SYS_ADMIN can be avoided in Kernel Manager, but cannot be avoided in Root Explorer because it's needed for mounting RW/RO. - Capabilities adjustment - Fix template typo --------- Signed-off-by: Rem01Gaming <Rem01_Gaming@proton.me>
This commit is contained in:
@@ -6,13 +6,15 @@
|
|||||||
"uid":0,
|
"uid":0,
|
||||||
"gid":0,
|
"gid":0,
|
||||||
"groups":[
|
"groups":[
|
||||||
"ROOT"
|
"ROOT",
|
||||||
|
"READPROC"
|
||||||
],
|
],
|
||||||
"capabilities":[
|
"capabilities":[
|
||||||
"CAP_SYS_ADMIN",
|
"CAP_SYS_MODULE",
|
||||||
"CAP_SYS_NICE",
|
"CAP_SYS_NICE",
|
||||||
"CAP_SYS_RESOURCE",
|
"CAP_SYS_RESOURCE",
|
||||||
"CAP_KILL",
|
"CAP_KILL",
|
||||||
|
"CAP_SYSLOG",
|
||||||
"CAP_PERFMON"
|
"CAP_PERFMON"
|
||||||
],
|
],
|
||||||
"context":"u:r:su:s0",
|
"context":"u:r:su:s0",
|
||||||
|
|||||||
@@ -9,8 +9,9 @@
|
|||||||
"ROOT"
|
"ROOT"
|
||||||
],
|
],
|
||||||
"capabilities":[
|
"capabilities":[
|
||||||
"CAP_SYS_ADMIN",
|
"CAP_DAC_READ_SEARCH",
|
||||||
"CAP_DAC_OVERRIDE"
|
"CAP_DAC_OVERRIDE",
|
||||||
|
"CAP_SYS_ADMIN"
|
||||||
],
|
],
|
||||||
"context":"u:r:su:s0",
|
"context":"u:r:su:s0",
|
||||||
"namespace":"INHERITED",
|
"namespace":"INHERITED",
|
||||||
Reference in New Issue
Block a user