templates/kernelmanager.root: Adjust capabilities (#1948)
* Following capabilities are removed as not commonly used on Kernel Managers: - CAP_SYS_NICE - CAP_PERFMON - CAP_SYS_MODULE - CAP_SYS_RESOURCE * Added CAP_DAC_OVERRIDE to prevent read/write permission issues Signed-off-by: Rem01Gaming <Rem01_Gaming@proton.me>
This commit is contained in:
@@ -10,13 +10,10 @@
|
||||
"READPROC"
|
||||
],
|
||||
"capabilities":[
|
||||
"CAP_SYS_MODULE",
|
||||
"CAP_SYS_NICE",
|
||||
"CAP_SYS_RESOURCE",
|
||||
"CAP_KILL",
|
||||
"CAP_SYSLOG",
|
||||
"CAP_PERFMON",
|
||||
"CAP_SYS_BOOT"
|
||||
"CAP_SYS_BOOT",
|
||||
"CAP_DAC_OVERRIDE"
|
||||
],
|
||||
"context":"u:r:su:s0",
|
||||
"namespace":"INHERITED",
|
||||
|
||||
Reference in New Issue
Block a user