daenamnu/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/all-in-one.git synced 2026-07-22 06:02:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

Drop any extra caps for collabora when seccomp profile is enabled

Browse Source 
Signed-off-by: Fs00 <francescosaltori@gmail.com>
This commit is contained in:
Fs00
2026-04-25 18:46:48 +02:00
parent d0d58df0fc
commit 61eab04d0e
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
php/src/Docker/DockerActionManager.php
+3 -1
View File
@@ -440,9 +440,11 @@ readonly class DockerActionManager {
// Special things for the collabora container which should not be exposed in the containers.json
} elseif ($container->identifier === 'nextcloud-aio-collabora') {
if (!$this->configurationManager->collaboraSeccompDisabled) {
// Load reference seccomp profile for collabora
// Load reference seccomp profile for collabora...
$seccompProfile = (string)file_get_contents(DataConst::GetCollaboraSeccompProfilePath());
$requestBody['HostConfig']['SecurityOpt'] = ["label:disable", "seccomp=$seccompProfile"];
// ...which allows the collabora container to run without any capabilities
$requestBody['HostConfig']['CapAdd'] = [];
}
// Additional Collabora options