From ba7f3de0ffdd627dcda543c38e2c488c06b862ba Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Thu, 25 Jan 2024 01:29:06 +0100
Subject: [PATCH] fix(mok): Add KILL capability
This patch hopefully fixes issues with sending kill signals to subprocesses from the master process of dovecot.
Exmaple error logs:
```
Jan 25 00:27:16 master: Error: service(auth): kill(14, SIGINT) failed: Operation not permitted
Jan 25 00:28:16 master: Error: service(auth): Process 14 is ignoring idle SIGINT
```
---
charts/mok/values.yaml | 2 ++
1 file changed, 2 insertions(+)
diff --git a/charts/mok/values.yaml b/charts/mok/values.yaml
index e5e10135b..f854038fc 100644
--- a/charts/mok/values.yaml
+++ b/charts/mok/values.yaml
@@ -152,6 +152,8 @@ dovecot:
- SETGID
# -- required to create spool directories
- FOWNER
+ # -- required by management process to keep subprocesses in check
+ - KILL
drop:
# -- required to drop privileges by default
- ALL
--
GitLab