summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authortheflakes <theflakes@gmail.com>2024-04-09 11:58:32 -0400
committerMergify <37929162+mergify[bot]@users.noreply.github.com>2024-04-09 15:59:09 +0000
commit5264ba80e8c623209e268cfd012e8afb5472c16b (patch)
treeaf9ce0bba132e7862e1f9b420c5892a03c7033fc /interface-definitions
parent98d6fdffeae42d1de5595e09693bb4793e69796b (diff)
downloadvyos-1x-5264ba80e8c623209e268cfd012e8afb5472c16b.tar.gz
vyos-1x-5264ba80e8c623209e268cfd012e8afb5472c16b.zip
container: T6210: add capability sys-nice
(cherry picked from commit b8f3c61ca514cacdfc2495f16869c1b1e07d2bbc)
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/container.xml.in8
1 files changed, 6 insertions, 2 deletions
diff --git a/interface-definitions/container.xml.in b/interface-definitions/container.xml.in
index 94f2e92f5..e7dacea36 100644
--- a/interface-definitions/container.xml.in
+++ b/interface-definitions/container.xml.in
@@ -25,7 +25,7 @@
<properties>
<help>Grant individual Linux capability to container instance</help>
<completionHelp>
- <list>net-admin net-bind-service net-raw setpcap sys-admin sys-module sys-time</list>
+ <list>net-admin net-bind-service net-raw setpcap sys-admin sys-module sys-nice sys-time</list>
</completionHelp>
<valueHelp>
<format>net-admin</format>
@@ -52,11 +52,15 @@
<description>Load, unload and delete kernel modules</description>
</valueHelp>
<valueHelp>
+ <format>sys-nice</format>
+ <description>Permission to set process nice value</description>
+ </valueHelp>
+ <valueHelp>
<format>sys-time</format>
<description>Permission to set system clock</description>
</valueHelp>
<constraint>
- <regex>(net-admin|net-bind-service|net-raw|setpcap|sys-admin|sys-module|sys-time)</regex>
+ <regex>(net-admin|net-bind-service|net-raw|setpcap|sys-admin|sys-module|sys-nice|sys-time)</regex>
</constraint>
<multi/>
</properties>