remove extra perms

beam-cloud · Jan 1, 2025 · 92e9e45 · 92e9e45
1 parent b509fd7
commit 92e9e45
Showing 1 changed file with 0 additions and 12 deletions.
diff --git a/pkg/worker/base_runc_config.json b/pkg/worker/base_runc_config.json
@@ -24,64 +24,52 @@
 				"CAP_AUDIT_WRITE",
 				"CAP_KILL",
 				"CAP_NET_RAW",
-				"CAP_NET_BIND_SERVICE",
-				"CAP_SYS_ADMIN",
 				"CAP_CHOWN",
 				"CAP_DAC_OVERRIDE",
 				"CAP_FSETID",
 				"CAP_FOWNER",
 				"CAP_SETGID",
 				"CAP_SETUID",
 				"CAP_SETFCAP",
-				"CAP_MKNOD",
 				"CAP_SYS_CHROOT"
 			],
 			"effective": [
 				"CAP_AUDIT_WRITE",
 				"CAP_KILL",
 				"CAP_NET_RAW",
-				"CAP_NET_BIND_SERVICE",
-				"CAP_SYS_ADMIN",
 				"CAP_CHOWN",
 				"CAP_DAC_OVERRIDE",
 				"CAP_FSETID",
 				"CAP_FOWNER",
 				"CAP_SETGID",
 				"CAP_SETUID",
 				"CAP_SETFCAP",
-				"CAP_MKNOD",
 				"CAP_SYS_CHROOT"
 			],
 			"permitted": [
 				"CAP_AUDIT_WRITE",
 				"CAP_KILL",
 				"CAP_NET_RAW",
-				"CAP_NET_BIND_SERVICE",
-				"CAP_SYS_ADMIN",
 				"CAP_CHOWN",
 				"CAP_DAC_OVERRIDE",
 				"CAP_FSETID",
 				"CAP_FOWNER",
 				"CAP_SETGID",
 				"CAP_SETUID",
 				"CAP_SETFCAP",
-				"CAP_MKNOD",
 				"CAP_SYS_CHROOT"
 			],
 			"ambient": [
 				"CAP_AUDIT_WRITE",
 				"CAP_KILL",
 				"CAP_NET_RAW",
 				"CAP_CHOWN",
-				"CAP_NET_BIND_SERVICE",
-				"CAP_SYS_ADMIN",
 				"CAP_DAC_OVERRIDE",
 				"CAP_FSETID",
 				"CAP_FOWNER",
 				"CAP_SETGID",
 				"CAP_SETUID",
 				"CAP_SETFCAP",
-				"CAP_MKNOD",
 				"CAP_SYS_CHROOT"
 			]
 		},