From 1d00a55fda3437814e69ad117ed2e005d442e305 Mon Sep 17 00:00:00 2001 From: Nicolas Vollmar Date: Sun, 9 Aug 2026 14:15:56 +0200 Subject: container: T9184: add chown capability --- interface-definitions/container.xml.in | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'interface-definitions') diff --git a/interface-definitions/container.xml.in b/interface-definitions/container.xml.in index 8a0da46a4..21285a92f 100644 --- a/interface-definitions/container.xml.in +++ b/interface-definitions/container.xml.in @@ -31,7 +31,7 @@ Grant individual Linux capability to container instance - net-admin net-bind-service net-raw mknod setpcap sys-admin sys-module sys-nice sys-time + net-admin net-bind-service net-raw chown mknod setpcap sys-admin sys-module sys-nice sys-time net-admin @@ -45,6 +45,10 @@ net-raw Permission to create raw network sockets + + chown + Permission to set file UIDs and GIDs + mknod Permission to create special files @@ -70,7 +74,7 @@ Permission to set system clock - (net-admin|net-bind-service|net-raw|mknod|setpcap|sys-admin|sys-module|sys-nice|sys-time) + (net-admin|net-bind-service|net-raw|chown|mknod|setpcap|sys-admin|sys-module|sys-nice|sys-time) -- cgit v1.2.3