Skip to content

Commit

Permalink
Add support for CAP_CHECKPOINT_RESTORE privileges
Browse files Browse the repository at this point in the history
  • Loading branch information
alexander-akhmetov committed Nov 17, 2024
1 parent fefb835 commit 6d8e3ad
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 0 deletions.
1 change: 1 addition & 0 deletions supervisor/addons/utils.py
Original file line number Diff line number Diff line change
Expand Up @@ -46,6 +46,7 @@ def rating_security(addon: AddonModel) -> int:
privilege in addon.privileged
for privilege in (
Capabilities.BPF,
Capabilities.CHECKPOINT_RESTORE,
Capabilities.DAC_READ_SEARCH,
Capabilities.NET_ADMIN,
Capabilities.NET_RAW,
Expand Down
1 change: 1 addition & 0 deletions supervisor/docker/const.py
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ class Capabilities(StrEnum):
"""Linux Capabilities."""

BPF = "BPF"
CHECKPOINT_RESTORE = "CHECKPOINT_RESTORE"
DAC_READ_SEARCH = "DAC_READ_SEARCH"
IPC_LOCK = "IPC_LOCK"
NET_ADMIN = "NET_ADMIN"
Expand Down

0 comments on commit 6d8e3ad

Please sign in to comment.