Commit Graph

6 Commits

Author SHA1 Message Date
copilot-swe-agent[bot]
3c53e69161 Replace blanket capability, with specific capabilities in all AppArmor profiles
Remove overly permissive blanket `capability,` rule (grants ALL Linux
capabilities) from 107 addon AppArmor profiles. Replace with only the
specific capabilities each addon needs based on its config.yaml
`privileged` field.

Base capabilities for all addons: setuid, setgid, chown, fowner, dac_override
Additional capabilities mapped from config.yaml privileged list:
- SYS_ADMIN -> sys_admin
- DAC_READ_SEARCH -> dac_read_search
- NET_ADMIN -> net_admin
- NET_RAW -> net_raw
- SYS_RAWIO -> sys_rawio
- SYS_TIME -> sys_time
- SYS_RESOURCE -> sys_resource

Addons with full_access: true (portainer_agent) retain blanket capability.

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
2026-03-17 07:42:05 +00:00
github-actions
4133525441 Github bot : image compressed 2026-03-15 23:11:54 +00:00
github-actions
aa17f35f46 GitHub bot : graphs updated 2026-03-13 12:17:41 +00:00
github-actions
d8f791ef9f Github bot : image compressed 2026-03-08 23:08:54 +00:00
github-actions
e5d4107a01 Github bot : issues linked to readme 2026-03-08 22:32:25 +00:00
Renat Gabdulhakov
02c6d55777 Deprecate Tor
Since a bridge support has been already added in to the community version https://github.com/hassio-addons/addon-tor/pull/170
2026-03-07 22:04:44 +00:00