Add CAP_NET_ADMIN capability to sysctl

With linux kernel 5.15+ change of proc/sys/net/ipv4/ip_forward require
CAP_NET_ADMIN (https://github.com/torvalds/linux/commit/8292d7f6). We do
 not use ip_forward now, but we should be ready for future changes of
 conf files.

Signed-off-by: Petr Fedchenkov <giggsoff@gmail.com>
This commit is contained in:
Petr Fedchenkov 2022-06-28 16:55:32 +03:00
parent 1073b2dd8d
commit afefea9740
No known key found for this signature in database
GPG Key ID: 01AB26025D699586

View File

@ -4,3 +4,4 @@ config:
readonly: true
capabilities:
- CAP_SYS_ADMIN
- CAP_NET_ADMIN