From: Balazs Szekeres <balazs.szekeres@nokia.com>
Date: Thu, 5 Sep 2019 19:33:55 +0000 (+0200)
Subject: Capability update
X-Git-Url: https://gerrit.akraino.org/r/gitweb?p=ta%2Fcaas-security.git;a=commitdiff_plain;h=429f53ca35c087ea854a2987c3b56e0916526bec

Capability update

Inside swift container rsync needs these capabilities

Change-Id: I65e51a99a0ef5a077a68509f6244fec5bcb081e6
Signed-off-by: Balazs Szekeres <balazs.szekeres@nokia.com>
---

diff --git a/rbac_manifests/caas-infra-psp.yaml b/rbac_manifests/caas-infra-psp.yaml
index 8392e87..96105ac 100644
--- a/rbac_manifests/caas-infra-psp.yaml
+++ b/rbac_manifests/caas-infra-psp.yaml
@@ -41,6 +41,8 @@ spec:
     rule: RunAsAny
   allowedCapabilities:
     - NET_BIND_SERVICE
+    - SETGID
+    - SETUID
     - ALL
     - IPC_LOCK
     - SYS_RESOURCE
diff --git a/rpmbuild.spec b/rpmbuild.spec
index 09c0510..8a0116e 100644
--- a/rpmbuild.spec
+++ b/rpmbuild.spec
@@ -15,7 +15,7 @@
 %define COMPONENT security
 %define RPM_NAME caas-%{COMPONENT}
 %define RPM_MAJOR_VERSION 1.0.0
-%define RPM_MINOR_VERSION 5
+%define RPM_MINOR_VERSION 6
 
 Name:           %{RPM_NAME}
 Version:        %{RPM_MAJOR_VERSION}