From b84277d7dc50b196b7cd27e7f2ceff6bf8f58a8d Mon Sep 17 00:00:00 2001 From: Florian Klink Date: Thu, 13 Jul 2023 15:59:27 +0300 Subject: [PATCH] docs: fix wrong capability name It's CAP_SYS_BOOT, not CAP_BOOT. Signed-off-by: Florian Klink Signed-off-by: Andrey Smirnov --- website/content/v1.4/learn-more/process-capabilities.md | 2 +- website/content/v1.5/learn-more/process-capabilities.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/website/content/v1.4/learn-more/process-capabilities.md b/website/content/v1.4/learn-more/process-capabilities.md index b23d0f5dc..e08b77b75 100644 --- a/website/content/v1.4/learn-more/process-capabilities.md +++ b/website/content/v1.4/learn-more/process-capabilities.md @@ -9,7 +9,7 @@ Linux defines a set of [process capabilities](https://man7.org/linux/man-pages/m Talos Linux for security reasons restricts any process from gaining the following capabilities: * `CAP_SYS_MODULE` (loading kernel modules) -* `CAP_BOOT` (rebooting the system) +* `CAP_SYS_BOOT` (rebooting the system) This means that any process including privileged Kubernetes pods will not be able to get these capabilities. diff --git a/website/content/v1.5/learn-more/process-capabilities.md b/website/content/v1.5/learn-more/process-capabilities.md index b23d0f5dc..e08b77b75 100644 --- a/website/content/v1.5/learn-more/process-capabilities.md +++ b/website/content/v1.5/learn-more/process-capabilities.md @@ -9,7 +9,7 @@ Linux defines a set of [process capabilities](https://man7.org/linux/man-pages/m Talos Linux for security reasons restricts any process from gaining the following capabilities: * `CAP_SYS_MODULE` (loading kernel modules) -* `CAP_BOOT` (rebooting the system) +* `CAP_SYS_BOOT` (rebooting the system) This means that any process including privileged Kubernetes pods will not be able to get these capabilities.