Capability update

Inside swift container rsync needs these capabilities

Change-Id: I65e51a99a0ef5a077a68509f6244fec5bcb081e6
Signed-off-by: Balazs Szekeres <balazs.szekeres@nokia.com>

diff --git a/rbac_manifests/caas-infra-psp.yaml b/rbac_manifests/caas-infra-psp.yaml
index 8392e87..96105ac 100644 (file)
--- a/rbac_manifests/caas-infra-psp.yaml
+++ b/rbac_manifests/caas-infra-psp.yaml
@@ -41,6 +41,8 @@ spec:
     rule: RunAsAny
   allowedCapabilities:
     - NET_BIND_SERVICE
     rule: RunAsAny
   allowedCapabilities:
     - NET_BIND_SERVICE

+    - SETGID
+    - SETUID

     - ALL
     - IPC_LOCK
     - SYS_RESOURCE
     - ALL
     - IPC_LOCK
     - SYS_RESOURCE

diff --git a/rpmbuild.spec b/rpmbuild.spec
index 09c0510..8a0116e 100644 (file)
--- a/rpmbuild.spec
+++ b/rpmbuild.spec
@@ -15,7 +15,7 @@
 %define COMPONENT security
 %define RPM_NAME caas-%{COMPONENT}
 %define RPM_MAJOR_VERSION 1.0.0
 %define COMPONENT security
 %define RPM_NAME caas-%{COMPONENT}
 %define RPM_MAJOR_VERSION 1.0.0

-%define RPM_MINOR_VERSION 5
+%define RPM_MINOR_VERSION 6

 
 Name:           %{RPM_NAME}
 Version:        %{RPM_MAJOR_VERSION}
 
 Name:           %{RPM_NAME}
 Version:        %{RPM_MAJOR_VERSION}