| 123456789101112131415161718192021222324 |
- runAsContext:
- - userName: root
- groupName: root
- gid: 0
- uid: 0
- description: The container starts as root, then NGINX and TFTP spawn under normal user accounts.
- capabilities:
- - name: CHOWN
- description: TFTP requires this ability to set permissions for sub-processes.
- - name: DAC_OVERRIDE
- description: TFTP requires this ability to set permissions for sub-processes.
- - name: FOWNER
- description: TFTP requires this ability to set permissions for sub-processes.
- - name: SETUID
- description: TFTP requires this ability to switch user for sub-processes.
- - name: SETGID
- description: TFTP requires this ability to switch group for sub-processes.
- - name: SYS_CHROOT
- description: TFTP requires this ability to spawn child processes.
- - name: NET_BIND_SERVICE
- description: TFTP requires this ability to bind to port 69 for TFTP.
- - name: KILL
- description: TFTP requires this ability to kill sub-processes.
- hostMounts: []
|
