From a27b20e87dc19e84a0aba822ff9398eaed0365a7 Mon Sep 17 00:00:00 2001 From: Jack O'Sullivan Date: Fri, 11 Jun 2021 01:46:03 +0100 Subject: [PATCH] Add CAP_SYS_PTRACE to config NOTE: This is needed to enter namespaces for other users! --- README.md | 2 +- config.json | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 24bd530..773bd9a 100644 --- a/README.md +++ b/README.md @@ -19,7 +19,7 @@ Plugin "ghcr.io/devplayer0/docker-net-dhcp:release-linux-amd64" is requesting th - network: [host] - host pid namespace: [true] - mount: [/var/run/docker.sock] - - capabilities: [CAP_NET_ADMIN CAP_SYS_ADMIN] + - capabilities: [CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_PTRACE] Do you grant the above permissions? [y/N] y release-linux-amd64: Pulling from ghcr.io/devplayer0/docker-net-dhcp Digest: sha256: diff --git a/config.json b/config.json index e65a740..359e30f 100644 --- a/config.json +++ b/config.json @@ -43,7 +43,8 @@ "linux": { "capabilities": [ "CAP_NET_ADMIN", - "CAP_SYS_ADMIN" + "CAP_SYS_ADMIN", + "CAP_SYS_PTRACE" ] } }