templates: Update templates and try to get rid with CAP_SYS_ADMIN (#1134)
- The use of CAP_SYS_ADMIN can be avoided in Kernel Manager, but cannot be avoided in Root Explorer because it's needed for mounting RW/RO. - Capabilities adjustment - Fix template typo --------- Signed-off-by: Rem01Gaming <Rem01_Gaming@proton.me>
This commit is contained in:
@@ -6,13 +6,15 @@
|
||||
"uid":0,
|
||||
"gid":0,
|
||||
"groups":[
|
||||
"ROOT"
|
||||
"ROOT",
|
||||
"READPROC"
|
||||
],
|
||||
"capabilities":[
|
||||
"CAP_SYS_ADMIN",
|
||||
"CAP_SYS_MODULE",
|
||||
"CAP_SYS_NICE",
|
||||
"CAP_SYS_RESOURCE",
|
||||
"CAP_KILL",
|
||||
"CAP_SYSLOG",
|
||||
"CAP_PERFMON"
|
||||
],
|
||||
"context":"u:r:su:s0",
|
||||
|
||||
@@ -9,8 +9,9 @@
|
||||
"ROOT"
|
||||
],
|
||||
"capabilities":[
|
||||
"CAP_SYS_ADMIN",
|
||||
"CAP_DAC_OVERRIDE"
|
||||
"CAP_DAC_READ_SEARCH",
|
||||
"CAP_DAC_OVERRIDE",
|
||||
"CAP_SYS_ADMIN"
|
||||
],
|
||||
"context":"u:r:su:s0",
|
||||
"namespace":"INHERITED",
|
||||
Reference in New Issue
Block a user