summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-11-18 19:37:21 +0100
committerGitHub <noreply@github.com>2021-11-18 19:37:21 +0100
commitce28a28b5bda2bf654eab4c291898835de1418d0 (patch)
treef79f7b2e45f06b9e0e264bd3690f4ebb542c126c /interface-definitions
parentd588a968f8d8beb22d36b5e4afa627b643511ca3 (diff)
parent236bcd5849227628ba57e6420039993a23e673d0 (diff)
downloadvyos-1x-ce28a28b5bda2bf654eab4c291898835de1418d0.tar.gz
vyos-1x-ce28a28b5bda2bf654eab4c291898835de1418d0.zip
Merge pull request #1073 from anthr76/container-cap
containers: T4006: Add capabilities net-bind-service
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/containers.xml.in8
1 files changed, 6 insertions, 2 deletions
diff --git a/interface-definitions/containers.xml.in b/interface-definitions/containers.xml.in
index 1e9c36ee5..30c7110b8 100644
--- a/interface-definitions/containers.xml.in
+++ b/interface-definitions/containers.xml.in
@@ -25,13 +25,17 @@
<properties>
<help>Container capabilities/permissions</help>
<completionHelp>
- <list>net-admin net-raw setpcap sys-admin sys-time</list>
+ <list>net-admin net-bind-service net-raw setpcap sys-admin sys-time</list>
</completionHelp>
<valueHelp>
<format>net-admin</format>
<description>Network operations (interface, firewall, routing tables)</description>
</valueHelp>
<valueHelp>
+ <format>net-bind-service</format>
+ <description>Bind a socket to privileged ports (port numbers less than 1024)</description>
+ </valueHelp>
+ <valueHelp>
<format>net-raw</format>
<description>Permission to create raw network sockets</description>
</valueHelp>
@@ -48,7 +52,7 @@
<description>Permission to set system clock</description>
</valueHelp>
<constraint>
- <regex>^(net-admin|net-raw|setpcap|sys-admin|sys-time)$</regex>
+ <regex>^(net-admin|net-bind-service|net-raw|setpcap|sys-admin|sys-time)$</regex>
</constraint>
<multi/>
</properties>