Add support for CAP_CHECKPOINT_RESTORE privileges

Author: alexander-akhmetov

supervisor/addons/utils.py

@@ -46,6 +46,7 @@ def rating_security(addon: AddonModel) -> int:
             privilege in addon.privileged
             for privilege in (
                 Capabilities.BPF,
+                Capabilities.CHECKPOINT_RESTORE,
                 Capabilities.DAC_READ_SEARCH,
                 Capabilities.NET_ADMIN,
                 Capabilities.NET_RAW,

supervisor/docker/const.py

@@ -11,6 +11,7 @@ class Capabilities(StrEnum):
     """Linux Capabilities."""
 
     BPF = "BPF"
+    CHECKPOINT_RESTORE = "CHECKPOINT_RESTORE"
     DAC_READ_SEARCH = "DAC_READ_SEARCH"
     IPC_LOCK = "IPC_LOCK"
     NET_ADMIN = "NET_ADMIN"