RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add cgroup_seclabel policycap.

This commit is contained in:
Chris PeBenito 2017-08-05 12:15:02 -04:00
parent 1637a8b407
commit c51b772d2f
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
policy/policy_capabilities
View File

@ -84,6 +84,13 @@ policycap open_perms;
# #
policycap extended_socket_class; policycap extended_socket_class;
# Enable fine-grained labeling of cgroup and cgroup2 filesystems.
# Requires Linux v4.11 and later.
#
# Added checks:
# (none)
#policycap cgroup_seclabel;
# Enable NoNewPrivileges support. Requires libsepol 2.7+ # Enable NoNewPrivileges support. Requires libsepol 2.7+
# and kernel 4.14 (estimated). # and kernel 4.14 (estimated).
# #