copilot-swe-agent[bot]
|
3c53e69161
|
Replace blanket capability, with specific capabilities in all AppArmor profiles
Remove overly permissive blanket `capability,` rule (grants ALL Linux
capabilities) from 107 addon AppArmor profiles. Replace with only the
specific capabilities each addon needs based on its config.yaml
`privileged` field.
Base capabilities for all addons: setuid, setgid, chown, fowner, dac_override
Additional capabilities mapped from config.yaml privileged list:
- SYS_ADMIN -> sys_admin
- DAC_READ_SEARCH -> dac_read_search
- NET_ADMIN -> net_admin
- NET_RAW -> net_raw
- SYS_RAWIO -> sys_rawio
- SYS_TIME -> sys_time
- SYS_RESOURCE -> sys_resource
Addons with full_access: true (portainer_agent) retain blanket capability.
Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
|
2026-03-17 07:42:05 +00:00 |
|
github-actions
|
4133525441
|
Github bot : image compressed
|
2026-03-15 23:11:54 +00:00 |
|
alexbelgium
|
271eaacc58
|
Updater bot : cleanuparr updated to 2.8.1
|
2026-03-14 01:26:37 +01:00 |
|
github-actions
|
aa17f35f46
|
GitHub bot : graphs updated
|
2026-03-13 12:17:41 +00:00 |
|
github-actions
|
d8f791ef9f
|
Github bot : image compressed
|
2026-03-08 23:08:54 +00:00 |
|
github-actions
|
ccb87b6c0d
|
GitHub bot : graphs updated
|
2026-03-06 12:17:46 +00:00 |
|
github-actions
|
45e7ff488a
|
GitHub bot: sanitize (spaces + LF endings) & chmod
|
2026-03-06 09:46:21 +00:00 |
|
Alexandre
|
101cf339d2
|
Rename cleanuparr/rootfs/etc/cont-init.d/99-run.sh to cleanuparr/rootfs/ha_entrypoint.sh
|
2026-03-06 10:44:38 +01:00 |
|
Alexandre
|
8338349afe
|
Rename cleanuparr/rootfs/ha_entrypoint.sh to cleanuparr/rootfs/etc/cont-init.d/99-run.sh
|
2026-03-06 10:42:55 +01:00 |
|
Pierre
|
fdeed7167e
|
Add Cleanuparr addon
|
2026-03-05 15:58:21 +01:00 |
|