runAsContext: - userName: root groupName: root gid: 0 uid: 0 description: WG Easy runs as root user. capabilities: - name: CHOWN description: WG Easy is able to chown files. - name: FOWNER description: WG Easy is able to bypass permission checks for it's sub-processes. - name: SYS_CHROOT description: WG Easy is able to use chroot. - name: MKNOD description: WG Easy is able to create device nodes. - name: DAC_OVERRIDE description: WG Easy is able to bypass permission checks. - name: FSETID description: WG Easy is able to set file capabilities. - name: KILL description: WG Easy is able to kill processes. - name: SETGID description: WG Easy is able to set group ID for it's sub-processes. - name: SETUID description: WG Easy is able to set user ID for it's sub-processes. - name: SETPCAP description: WG Easy is able to set process capabilities. - name: NET_BIND_SERVICE description: WG Easy is able to bind to privileged ports. - name: SETFCAP description: WG Easy is able to set file capabilities. - name: NET_RAW description: WG Easy is able to use raw sockets. - name: AUDIT_WRITE description: WG Easy is able to write to audit log. - name: SYS_MODULE description: WG Easy is able to load kernel modules. - name: NET_ADMIN description: WG Easy is able to perform various network-related operations. hostMounts: []