Skip to content

Commit

Permalink
Add support for CAP_BPF and CAP_PERFMON privileges
Browse files Browse the repository at this point in the history
  • Loading branch information
felipecrs committed Apr 24, 2023
1 parent 7c29c56 commit 73b2df4
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 0 deletions.
2 changes: 2 additions & 0 deletions supervisor/addons/utils.py
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,8 @@ def rating_security(addon: AddonModel) -> int:
Capabilities.SYS_RAWIO,
Capabilities.SYS_PTRACE,
Capabilities.SYS_MODULE,
Capabilities.CAP_BPF,
Capabilities.CAP_PERFMON,
Capabilities.DAC_READ_SEARCH,
)
)
Expand Down
2 changes: 2 additions & 0 deletions supervisor/docker/const.py
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,8 @@
class Capabilities(str, Enum):
"""Linux Capabilities."""

CAP_BPF = "CAP_BPF"
CAP_PERFMON = "CAP_PERFMON"
DAC_READ_SEARCH = "DAC_READ_SEARCH"
IPC_LOCK = "IPC_LOCK"
NET_ADMIN = "NET_ADMIN"
Expand Down

0 comments on commit 73b2df4

Please sign in to comment.