mirror of
https://github.com/openwrt/packages.git
synced 2026-05-31 06:51:51 +08:00
John Audia
2a7364534e
Rsyncd only needs a subset of all capabilities so create a dedicated user with these capabilities. This is better from both a security and an isolation perspective than running as root. Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc Signed-off-by: John Audia <therealgraysky@proton.me>
38 lines
597 B
JSON
38 lines
597 B
JSON
{
|
|
"bounding": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
],
|
|
"effective": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
],
|
|
"ambient": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
],
|
|
"permitted": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
],
|
|
"inheritable": [
|
|
"CAP_NET_BIND_SERVICE",
|
|
"CAP_SYS_CHROOT",
|
|
"CAP_SETUID",
|
|
"CAP_SETGID",
|
|
"CAP_DAC_OVERRIDE"
|
|
]
|
|
}
|