metadata.yaml 846 B

123456789101112131415161718192021222324252627
  1. runAsContext:
  2. - userName: cool
  3. groupName: cool
  4. uid: 100
  5. gid: 101
  6. description: Collabora runs as non-root user.
  7. - userName: root
  8. groupName: root
  9. gid: 0
  10. uid: 0
  11. description: Nginx runs as root user.
  12. capabilities:
  13. - name: CHOWN
  14. description: Collabora and Nginx are able to chown files.
  15. - name: SETPCAP
  16. description: Collabora is able to set process capabilities.
  17. - name: FOWNER
  18. description: Collabora is able to bypass permission checks for it's sub-processes.
  19. - name: SYS_CHROOT
  20. description: Collabora is able to use chroot.
  21. - name: SETGID
  22. description: Nginx is able to set group ID for it's sub-processes.
  23. - name: SETUID
  24. description: Nginx is able to set user ID for it's sub-processes.
  25. - name: MKNOD
  26. description: Collabora is able to create device nodes.
  27. hostMounts: []