metadata.yaml 1.0 KB

123456789101112131415161718192021222324252627282930
  1. runAsContext:
  2. - userName: root
  3. groupName: root
  4. gid: 0
  5. uid: 0
  6. description: Pi-hole runs as root user.
  7. capabilities:
  8. - name: CHOWN
  9. description: Pi-hole is able to chown files.
  10. - name: FOWNER
  11. description: Pi-hole is able to bypass permission checks for it's sub-processes.
  12. - name: DAC_OVERRIDE
  13. description: Pi-hole is able to bypass permission checks.
  14. - name: SETGID
  15. description: Pi-hole is able to set group ID for it's sub-processes.
  16. - name: SETUID
  17. description: Pi-hole is able to set user ID for it's sub-processes.
  18. - name: SETFCAP
  19. description: Pi-hole is able to set file capabilities.
  20. - name: SETPCAP
  21. description: Pi-hole is able to set process capabilities.
  22. - name: NET_ADMIN
  23. description: Pi-hole is able to perform various network-related operations.
  24. - name: NET_BIND_SERVICE
  25. description: Pi-hole is able to bind to a privileged port.
  26. - name: NET_RAW
  27. description: Pi-hole is able to use raw sockets.
  28. - name: KILL
  29. description: Pi-hole is able to kill processes.
  30. hostMounts: []