Merge pull request #185 from cgzones/genfs_seclabel_symlinks

2020-02-16 11:20:35 -05:00 · 2020-02-16 11:20:35 -05:00 · 9227d97eac
parent 87987636c1 46de44f7d1
commit 9227d97eac
1 changed files with 8 additions and 0 deletions
--- a/policy/policy_capabilities
+++ b/policy/policy_capabilities
@ -98,3 +98,11 @@ policycap cgroup_seclabel;
 # process2: nnp_transition, nosuid_transition
 #
 policycap nnp_nosuid_transition;
+
+# Enable extended genfscon labeling for symlinks.
+# Requires libsepol 3.1 (estimated) and kernel 5.6 (estimated).
+#
+# Added checks:
+# (none)
+#
+#policycap genfs_seclabel_symlinks;