scrutiny: add caps

truenas · Nov 22, 2024 · 4090b8c · 4090b8c
1 parent 541bd27
commit 4090b8c
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/ix-dev/community/scrutiny/app.yaml b/ix-dev/community/scrutiny/app.yaml
@@ -2,6 +2,10 @@ app_version: v0.8.1
 capabilities:
 - description: Scrutiny is able to use raw I/O.
   name: SYS_RAWIO
+- description: Scrutiny is able to bypass permission checks for it's sub-processes.
+  name: FOWNER
+- description: Scrutiny is able to bypass permission checks.
+  name: DAC_OVERRIDE
 categories:
 - monitoring
 description: Scrutiny is tool for Hard Drive S.M.A.R.T Monitoring, Historical Trends
@@ -33,4 +37,4 @@ sources:
 - https://github.com/AnalogJ/scrutiny
 title: Scrutiny
 train: community
-version: 1.0.3
+version: 1.0.4
diff --git a/ix-dev/community/scrutiny/templates/docker-compose.yaml b/ix-dev/community/scrutiny/templates/docker-compose.yaml
@@ -3,7 +3,7 @@
 {% set c1 = tpl.add_container(values.consts.scrutiny_container_name, "image") %}
 
 {% do c1.set_user(0,0) %}
-{% do c1.add_caps(["SYS_RAWIO"]) %}
+{% do c1.add_caps(["SYS_RAWIO", "DAC_OVERRIDE", "FOWNER"]) %}
 {% if values.scrutiny.elevate_privileges %}
   {% do c1.add_caps(["SYS_ADMIN"]) %}
 {% endif %}