update unconfined module

* grant capability2:wake_alarm * remove deprecated interfaces
2017-01-06 15:01:45 +01:00 · 2017-01-06 15:01:45 +01:00 · b59dc99d56
parent a67c2a819d
commit b59dc99d56
1 changed files with 1 additions and 1 deletions
--- a/policy/modules/system/unconfined.if
+++ b/policy/modules/system/unconfined.if
@ -20,7 +20,7 @@ interface(`unconfined_domain_noaudit',`

 	# Use most Linux capabilities
 	allow $1 self:capability ~sys_module;
-	allow $1 self:capability2 syslog;
+	allow $1 self:capability2 { syslog wake_alarm };
 	allow $1 self:fifo_file manage_fifo_file_perms;

 	# Transition to myself, to make get_ordered_context_list happy.