diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-11-18 19:37:21 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-11-18 19:37:21 +0100 |
| commit | ce28a28b5bda2bf654eab4c291898835de1418d0 (patch) | |
| tree | f79f7b2e45f06b9e0e264bd3690f4ebb542c126c | |
| parent | d588a968f8d8beb22d36b5e4afa627b643511ca3 (diff) | |
| parent | 236bcd5849227628ba57e6420039993a23e673d0 (diff) | |
| download | vyos-1x-ce28a28b5bda2bf654eab4c291898835de1418d0.tar.gz vyos-1x-ce28a28b5bda2bf654eab4c291898835de1418d0.zip | |
Merge pull request #1073 from anthr76/container-cap
containers: T4006: Add capabilities net-bind-service
| -rw-r--r-- | interface-definitions/containers.xml.in | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/interface-definitions/containers.xml.in b/interface-definitions/containers.xml.in index 1e9c36ee5..30c7110b8 100644 --- a/interface-definitions/containers.xml.in +++ b/interface-definitions/containers.xml.in @@ -25,13 +25,17 @@ <properties> <help>Container capabilities/permissions</help> <completionHelp> - <list>net-admin net-raw setpcap sys-admin sys-time</list> + <list>net-admin net-bind-service net-raw setpcap sys-admin sys-time</list> </completionHelp> <valueHelp> <format>net-admin</format> <description>Network operations (interface, firewall, routing tables)</description> </valueHelp> <valueHelp> + <format>net-bind-service</format> + <description>Bind a socket to privileged ports (port numbers less than 1024)</description> + </valueHelp> + <valueHelp> <format>net-raw</format> <description>Permission to create raw network sockets</description> </valueHelp> @@ -48,7 +52,7 @@ <description>Permission to set system clock</description> </valueHelp> <constraint> - <regex>^(net-admin|net-raw|setpcap|sys-admin|sys-time)$</regex> + <regex>^(net-admin|net-bind-service|net-raw|setpcap|sys-admin|sys-time)$</regex> </constraint> <multi/> </properties> |