From 1b364e518f0816ecce2ac31b5285b2365facff82 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= <cgzones@googlemail.com>
Date: Fri, 3 Feb 2023 20:37:14 +0100
Subject: [PATCH] Update permission map
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
* Add permission cmd to class io_uring (added in Linux 6.0 and 5.19.9)
* Add class user_namespace (added in Linux 6.1)
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
---
setools/perm_map | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
diff --git a/setools/perm_map b/setools/perm_map
index dbb8447..6fdf305 100644
--- a/setools/perm_map
+++ b/setools/perm_map
@@ -27,7 +27,7 @@
# Look to the examples below for further clarification.
#
# Number of object classes.
-133
+134
class netlink_audit_socket 26
nlmsg_relay w 10
@@ -2292,6 +2292,10 @@ class anon_inode 25
watch_with_perm r 3
watch_reads r 3
-class io_uring 2
+class io_uring 3
override_creds w 10
sqpoll w 10
+ cmd w 10
+
+class user_namespace 1
+ create w 10