From 7514dfa33f8d0f337eb8f0dcc169a65c1433350e Mon Sep 17 00:00:00 2001
From: Til Wegener <38760774+tilwegener@users.noreply.github.com>
Date: Fri, 17 Jul 2026 10:29:21 +0200
Subject: [PATCH 1/2] Update Docker capabilities in README

Added capabilities CHOWN, SETUID, and SETGID to the Docker configuration.
---
 README.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/README.md b/README.md
index a2aa52c..95f7525 100644
--- a/README.md
+++ b/README.md
@@ -160,6 +160,10 @@ services:
       - "5514:1514/tcp"
     cap_add:
       - NET_RAW
+      - CHOWN
+      - SETUID
+      - SETGID
+      - NET_RAW
     restart: unless-stopped
 ```
 
@@ -269,6 +273,10 @@ services:
       - ALL
     cap_add:
       - NET_RAW            # Required for ICMP ping and traceroute
+      - CHOWN
+      - SETUID
+      - SETGID
+      - NET_RAW
     security_opt:
       - no-new-privileges:true
 

From 9c40c97c0550b499ea0f4f5d6ac4f7e8bd932836 Mon Sep 17 00:00:00 2001
From: Til Wegener <38760774+tilwegener@users.noreply.github.com>
Date: Fri, 17 Jul 2026 10:30:23 +0200
Subject: [PATCH 2/2] Add capabilities CHOWN, SETUID, and SETGID

---
 docker-compose.example.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker-compose.example.yml b/docker-compose.example.yml
index af0c0b3..b5f0f73 100644
--- a/docker-compose.example.yml
+++ b/docker-compose.example.yml
@@ -67,4 +67,8 @@ services:
       - ALL
     cap_add:
       - NET_RAW
+      - CHOWN
+      - SETUID
+      - SETGID
+      - NET_RAW
     restart: unless-stopped