summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorNicolas Vollmar <nvollmar@gmail.com>2026-08-09 14:15:56 +0200
committerNicolas Vollmar <nvollmar@gmail.com>2026-08-10 16:09:43 +0200
commit1d00a55fda3437814e69ad117ed2e005d442e305 (patch)
tree2f6541ece5a616caa941127b098b9667b54b78b5 /interface-definitions
parentb361f499edbca79703157b943201547b52f0e453 (diff)
downloadvyos-1x-1d00a55fda3437814e69ad117ed2e005d442e305.tar.gz
vyos-1x-1d00a55fda3437814e69ad117ed2e005d442e305.zip
container: T9184: add chown capability
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/container.xml.in8
1 files changed, 6 insertions, 2 deletions
diff --git a/interface-definitions/container.xml.in b/interface-definitions/container.xml.in
index 8a0da46a4..21285a92f 100644
--- a/interface-definitions/container.xml.in
+++ b/interface-definitions/container.xml.in
@@ -31,7 +31,7 @@
<properties>
<help>Grant individual Linux capability to container instance</help>
<completionHelp>
- <list>net-admin net-bind-service net-raw mknod setpcap sys-admin sys-module sys-nice sys-time</list>
+ <list>net-admin net-bind-service net-raw chown mknod setpcap sys-admin sys-module sys-nice sys-time</list>
</completionHelp>
<valueHelp>
<format>net-admin</format>
@@ -46,6 +46,10 @@
<description>Permission to create raw network sockets</description>
</valueHelp>
<valueHelp>
+ <format>chown</format>
+ <description>Permission to set file UIDs and GIDs</description>
+ </valueHelp>
+ <valueHelp>
<format>mknod</format>
<description>Permission to create special files</description>
</valueHelp>
@@ -70,7 +74,7 @@
<description>Permission to set system clock</description>
</valueHelp>
<constraint>
- <regex>(net-admin|net-bind-service|net-raw|mknod|setpcap|sys-admin|sys-module|sys-nice|sys-time)</regex>
+ <regex>(net-admin|net-bind-service|net-raw|chown|mknod|setpcap|sys-admin|sys-module|sys-nice|sys-time)</regex>
</constraint>
<multi/>
</properties>