chore: Remove redundant capability SYS_PTRACE (#2624)

* chore: Remove `SYS_PTRACE` capability from docs and configs
* chore: Remove `SYS_PTRACE` capability from tests

Doesn't seem to be required. It was originally added when the original change detection feature PR apparently needed it to function.

README.md

@@ -259,7 +259,6 @@ services:
       - ONE_DIR=1
     cap_add:
       - NET_ADMIN
-      - SYS_PTRACE
     restart: always
 ```
 
@@ -316,6 +315,5 @@ services:
       - POSTFIX_MESSAGE_SIZE_LIMIT=100000000
     cap_add:
       - NET_ADMIN
-      - SYS_PTRACE
     restart: always
 ```

docker-compose.yml

@@ -26,5 +26,3 @@ services:
     stop_grace_period: 1m
     cap_add:
       - NET_ADMIN
-      - SYS_PTRACE
-

docs/content/config/advanced/full-text-search.md

@@ -83,7 +83,6 @@ While indexing is memory intensive, you can configure the plugin to limit the am
           stop_grace_period: 1m
           cap_add:
             - NET_ADMIN
-            - SYS_PTRACE
     ```
 
 3. Recreate containers:

docs/content/config/advanced/kubernetes.md

@@ -199,7 +199,6 @@ spec:
                 - NET_BIND_SERVICE
                 # miscellaneous  capabilities
                 - SYS_CHROOT
-                - SYS_PTRACE
                 - KILL
               drop: [ALL]
             seccompProfile:

docs/content/examples/tutorials/basic-installation.md

@@ -61,7 +61,6 @@ In this setup `docker-mailserver` is not intended to receive email externally, s
               - SPOOF_PROTECTION=0
             cap_add:
               - NET_ADMIN # For Fail2Ban to work
-              - SYS_PTRACE
         ```
 
     - The docs have a detailed page on [Environment Variables][docs-environment] for reference.

test/default_relay_host.bats

@@ -8,7 +8,6 @@ function setup() {
     -v "${PRIVATE_CONFIG}":/tmp/docker-mailserver \
     -v "$(pwd)/test/test-files":/tmp/docker-mailserver-test:ro \
     -e DEFAULT_RELAY_HOST=default.relay.host.invalid:25 \
-    --cap-add=SYS_PTRACE \
     -e PERMIT_DOCKER=host \
     -h mail.my-domain.com -t "${NAME}"
 

test/mail_privacy.bats

@@ -8,7 +8,6 @@ function setup_file() {
     -v "${PRIVATE_CONFIG}":/tmp/docker-mailserver \
     -v "$(pwd)/test/test-files":/tmp/docker-mailserver-test:ro \
     -e ENABLE_MANAGESIEVE=1 \
-    --cap-add=SYS_PTRACE \
     -e PERMIT_DOCKER=host \
     -h mail.my-domain.com \
     -e SSL_TYPE='snakeoil' \

test/mail_special_use_folders.bats

@@ -10,7 +10,6 @@ setup_file() {
     -e SASL_PASSWD="external-domain.com username:password" \
     -e ENABLE_CLAMAV=0 \
     -e ENABLE_SPAMASSASSIN=0 \
-    --cap-add=SYS_PTRACE \
     -e PERMIT_DOCKER=host \
     -h mail.my-domain.com -t "${NAME}"
 

test/mail_undef_spam_subject.bats

@@ -29,7 +29,6 @@ function setup() {
     -e ENABLE_SRS=1 \
     -e SASL_PASSWD="external-domain.com username:password" \
     -e ENABLE_MANAGESIEVE=1 \
-    --cap-add=SYS_PTRACE \
     -e PERMIT_DOCKER=host \
     -h mail.my-domain.com -t "${NAME}")
 

test/mail_with_mdbox.bats

@@ -11,7 +11,6 @@ setup_file() {
     -e ENABLE_CLAMAV=0 \
     -e ENABLE_SPAMASSASSIN=0 \
     -e DOVECOT_MAILBOX_FORMAT=mdbox \
-    --cap-add=SYS_PTRACE \
     -e PERMIT_DOCKER=host \
     -h mail.my-domain.com -t "${NAME}"
 

test/mail_with_relays.bats

@@ -13,7 +13,6 @@ function setup_file() {
     -e RELAY_PORT=2525 \
     -e RELAY_USER=smtp_user \
     -e RELAY_PASSWORD=smtp_password \
-    --cap-add=SYS_PTRACE \
     -e PERMIT_DOCKER=host \
     -h mail.my-domain.com -t "${NAME}"
 

test/mail_with_sdbox.bats

@@ -11,7 +11,6 @@ setup_file() {
     -e ENABLE_CLAMAV=0 \
     -e ENABLE_SPAMASSASSIN=0 \
     -e DOVECOT_MAILBOX_FORMAT=sdbox \
-    --cap-add=SYS_PTRACE \
     -e PERMIT_DOCKER=host \
     -h mail.my-domain.com -t "${NAME}"
 

test/open_dkim.bats

@@ -14,7 +14,6 @@ function setup_file
 
   docker run -d \
     --name "${CONTAINER_NAME}" \
-    --cap-add=SYS_PTRACE \
     -v "${PRIVATE_CONFIG}":/tmp/docker-mailserver \
     -v "${PWD}/test/test-files":/tmp/docker-mailserver-test:ro \
     -e DEFAULT_RELAY_HOST=default.relay.host.invalid:25 \

test/tests.bats

@@ -36,7 +36,6 @@ setup_file() {
     -e SSL_TYPE='snakeoil' \
     -e VIRUSMAILS_DELETE_DELAY=7 \
     -h mail.my-domain.com \
-    --cap-add=SYS_PTRACE \
     --tty \
     "${NAME}"