jeans/supervisor
jeans/supervisor
1
0
Fork 0
mirror of https://github.com/home-assistant/supervisor.git synced 2025-07-28 11:36:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add support for NET_RAW privileges (#4242)

Browse Source
This commit is contained in:
Franck Nijhof 2023-04-20 17:03:08 +02:00 committed by GitHub
parent ff54c5268c
commit 9635c70f2b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
supervisor/addons/utils.py
View File

@ -45,6 +45,7 @@ def rating_security(addon: AddonModel) -> int:
privilege in addon.privileged privilege in addon.privileged
for privilege in ( for privilege in (
Capabilities.NET_ADMIN, Capabilities.NET_ADMIN,
Capabilities.NET_RAW,
Capabilities.SYS_ADMIN, Capabilities.SYS_ADMIN,
Capabilities.SYS_RAWIO, Capabilities.SYS_RAWIO,
Capabilities.SYS_PTRACE, Capabilities.SYS_PTRACE,

1
supervisor/docker/const.py
View File

@ -8,6 +8,7 @@ class Capabilities(str, Enum):
DAC_READ_SEARCH = "DAC_READ_SEARCH" DAC_READ_SEARCH = "DAC_READ_SEARCH"
IPC_LOCK = "IPC_LOCK" IPC_LOCK = "IPC_LOCK"
NET_ADMIN = "NET_ADMIN" NET_ADMIN = "NET_ADMIN"
NET_RAW = "NET_RAW"
SYS_ADMIN = "SYS_ADMIN" SYS_ADMIN = "SYS_ADMIN"
SYS_MODULE = "SYS_MODULE" SYS_MODULE = "SYS_MODULE"
SYS_NICE = "SYS_NICE" SYS_NICE = "SYS_NICE"