From b59dc99d568fa41f3856dba614b7cd48f3404713 Mon Sep 17 00:00:00 2001
From: cgzones <cgzones@googlemail.com>
Date: Fri, 6 Jan 2017 15:01:45 +0100
Subject: [PATCH] update unconfined module * grant capability2:wake_alarm *
 remove deprecated interfaces

---
 policy/modules/system/unconfined.if | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/system/unconfined.if b/policy/modules/system/unconfined.if
index 78f9c14e0..3bf66058e 100644
--- a/policy/modules/system/unconfined.if
+++ b/policy/modules/system/unconfined.if
@@ -20,7 +20,7 @@ interface(`unconfined_domain_noaudit',`
 
 	# Use most Linux capabilities
 	allow $1 self:capability ~sys_module;
-	allow $1 self:capability2 syslog;
+	allow $1 self:capability2 { syslog wake_alarm };
 	allow $1 self:fifo_file manage_fifo_file_perms;
 
 	# Transition to myself, to make get_ordered_context_list happy.