templates: Update templates and try to get rid with CAP_SYS_ADMIN (#1134)

- The use of CAP_SYS_ADMIN can be avoided in Kernel Manager, but cannot
be avoided in Root Explorer because it's needed for mounting RW/RO.
- Capabilities adjustment
- Fix template typo

---------

Signed-off-by: Rem01Gaming <Rem01_Gaming@proton.me>
This commit is contained in:
Rem01Gaming
2023-11-13 12:24:54 +07:00
committed by GitHub
parent b658d820a1
commit 8fdff569d6
2 changed files with 7 additions and 4 deletions

View File

@@ -6,13 +6,15 @@
"uid":0, "uid":0,
"gid":0, "gid":0,
"groups":[ "groups":[
"ROOT" "ROOT",
"READPROC"
], ],
"capabilities":[ "capabilities":[
"CAP_SYS_ADMIN", "CAP_SYS_MODULE",
"CAP_SYS_NICE", "CAP_SYS_NICE",
"CAP_SYS_RESOURCE", "CAP_SYS_RESOURCE",
"CAP_KILL", "CAP_KILL",
"CAP_SYSLOG",
"CAP_PERFMON" "CAP_PERFMON"
], ],
"context":"u:r:su:s0", "context":"u:r:su:s0",

View File

@@ -9,8 +9,9 @@
"ROOT" "ROOT"
], ],
"capabilities":[ "capabilities":[
"CAP_SYS_ADMIN", "CAP_DAC_READ_SEARCH",
"CAP_DAC_OVERRIDE" "CAP_DAC_OVERRIDE",
"CAP_SYS_ADMIN"
], ],
"context":"u:r:su:s0", "context":"u:r:su:s0",
"namespace":"INHERITED", "namespace":"INHERITED",