mirror of
https://github.com/openwrt/packages.git
synced 2026-06-13 17:11:32 +08:00
John Audia
7301104e68
Rsyncd only needs a subset of all capabilities so create
a dedicated user with these capabilities. This is better from both a
security and an isolation perspective than running as root.
Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc
Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 2a7364534e)
38 lines
597 B
JSON
38 lines
597 B
JSON
{
|
|
"bounding": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
],
|
|
"effective": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
],
|
|
"ambient": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
],
|
|
"permitted": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
],
|
|
"inheritable": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
]
|
|
}
|