nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

access_vectors: Add new capabilities to cap2 

Updated location of capability definitions to point to current location within kernel source code.

CAP_BPF and CAP_PERFMON mainlined in: cb8e59cc87201af93dfbb6c3dccc8fcad72a09c2, original commit: a17b53c4a4b55ec322c132b6670743612229ee9c
CAP_CHECKPOINT_RESTORE mainlined in: 74858abbb1032222f922487fd1a24513bbed80f9, original commit: 124ea650d3072b005457faed69909221c2905a1f

The missing capabilities were noticed on archlinux with kernel 5.8.14-arch1-1.

Signed-off-by: Dannick Pomerleau <dannickp@hotmail.com>
This commit is contained in:
Dannick Pomerleau 2020-10-15 20:49:49 -04:00
parent 493f56b59d
commit b5bc33bc9c
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/flask/access_vectors
View File

@ -132,7 +132,7 @@ common x_device
# #
common cap common cap
{ {
# The capabilities are defined in include/linux/capability.h # The capabilities are defined in include/uapi/linux/capability.h
# Capabilities >= 32 are defined in the cap2 common. # Capabilities >= 32 are defined in the cap2 common.
# Care should be taken to ensure that these are consistent with # Care should be taken to ensure that these are consistent with
# those definitions. (Order matters) # those definitions. (Order matters)
@ -179,6 +179,9 @@ common cap2
wake_alarm wake_alarm
block_suspend block_suspend
audit_read audit_read
perfmon
bpf
checkpoint_restore
} }
# #