Add cgroup_seclabel policycap.

2017-08-05 12:15:02 -04:00 · 2017-08-05 12:15:02 -04:00 · c51b772d2f
parent 1637a8b407
commit c51b772d2f
1 changed files with 7 additions and 0 deletions
--- a/policy/policy_capabilities
+++ b/policy/policy_capabilities
@ -84,6 +84,13 @@ policycap open_perms;
 #
 policycap extended_socket_class;

+# Enable fine-grained labeling of cgroup and cgroup2 filesystems.
+# Requires Linux v4.11 and later.
+#
+# Added checks:
+# (none)
+#policycap cgroup_seclabel;
+
 # Enable NoNewPrivileges support.  Requires libsepol 2.7+
 # and kernel 4.14 (estimated).
 #