mirror of
https://github.com/truenas/charts.git
synced 2026-04-13 17:52:13 +08:00
310d6d6426
* Add `frigate` to `community` apps * add cia values * add initial templtes * add values * add common * fix typo * another one * make it non-fail no matter the indendation * typo * questions and gpu * perms * more caps * port * shm and usb * whops * privieleged on usb bus mount * invert logic
19 lines
640 B
YAML
19 lines
640 B
YAML
runAsContext:
|
|
- userName: root
|
|
groupName: root
|
|
gid: 0
|
|
uid: 0
|
|
description: Frigate runs as root user. When USB Bus is mounted, it is able to escalate privileges.
|
|
capabilities:
|
|
- name: CHOWN
|
|
description: Frigate is able to chown files.
|
|
- name: FOWNER
|
|
description: Frigate are able to bypass permission checks for it's sub-processes.
|
|
- name: DAC_OVERRIDE
|
|
description: Frigate is able to bypass permission checks.
|
|
- name: SETGID
|
|
description: Frigate is able to set group ID for it's sub-processes.
|
|
- name: SETUID
|
|
description: Frigate is able to set user ID for it's sub-processes.
|
|
hostMounts: []
|