policy_capabilities: add stub for userspace_initial_context

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
2024-10-30 15:26:30 +01:00 · 2024-10-30 15:26:30 +01:00 · 566ac0b9f8
parent 42a3add9d4
commit 566ac0b9f8
1 changed files with 8 additions and 0 deletions
--- a/policy/policy_capabilities
+++ b/policy/policy_capabilities
@ -115,6 +115,14 @@ policycap nnp_nosuid_transition;
 #
 #policycap ioctl_skip_cloexec;

+# Enable separate user space context for processes started before first
+# policy load.
+# Requires libsepol 3.7 and kernel 6.8.
+#
+# Added checks:
+# (none)
+#policycap userspace_initial_context;
+
 # Enable netlink xperms support. Requires libsepol 3.8+
 # and kernel 6.13.
 #