summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authoropswill <will@nixops.org>2026-08-19 14:23:05 +0800
committeropswill <will@nixops.org>2026-08-19 14:23:05 +0800
commitd7531df33ab7e480445ed43cd2b120d4e2718643 (patch)
tree7ab01b082d4a3ac0ca9338eeea9efe85e186c93e
parent6fb116ccbe0b7d4ec889244ce5e820c0704c00eb (diff)
downloadvyos-1x-d7531df33ab7e480445ed43cd2b120d4e2718643.tar.gz
vyos-1x-d7531df33ab7e480445ed43cd2b120d4e2718643.zip
container: T9229: add sys-rawio capability
-rw-r--r--interface-definitions/container.xml.in8
1 files changed, 6 insertions, 2 deletions
diff --git a/interface-definitions/container.xml.in b/interface-definitions/container.xml.in
index 21285a92f..e52ba9ec2 100644
--- a/interface-definitions/container.xml.in
+++ b/interface-definitions/container.xml.in
@@ -31,7 +31,7 @@
<properties>
<help>Grant individual Linux capability to container instance</help>
<completionHelp>
- <list>net-admin net-bind-service net-raw chown mknod setpcap sys-admin sys-module sys-nice sys-time</list>
+ <list>net-admin net-bind-service net-raw chown mknod setpcap sys-admin sys-module sys-nice sys-rawio sys-time</list>
</completionHelp>
<valueHelp>
<format>net-admin</format>
@@ -70,11 +70,15 @@
<description>Permission to set process nice value</description>
</valueHelp>
<valueHelp>
+ <format>sys-rawio</format>
+ <description>Permission to perform raw I/O operations</description>
+ </valueHelp>
+ <valueHelp>
<format>sys-time</format>
<description>Permission to set system clock</description>
</valueHelp>
<constraint>
- <regex>(net-admin|net-bind-service|net-raw|chown|mknod|setpcap|sys-admin|sys-module|sys-nice|sys-time)</regex>
+ <regex>(net-admin|net-bind-service|net-raw|chown|mknod|setpcap|sys-admin|sys-module|sys-nice|sys-rawio|sys-time)</regex>
</constraint>
<multi/>
</properties>