Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 64919e60 authored by Eric Paris's avatar Eric Paris Committed by James Morris
Browse files

SELinux: include definition of new capabilities 



The kernel has added CAP_WAKE_ALARM and CAP_EPOLLWAKEUP.  We need to
define these in SELinux so they can be mediated by policy.

Signed-off-by: default avatarEric Paris <eparis@redhat.com>
Signed-off-by: default avatarJames Morris <james.l.morris@oracle.com>
parent 918227bb

security/selinux/include/classmap.h

+3 −1
Original line number Diff line number Diff line
@@ -145,7 +145,9 @@ struct security_class_mapping secclass_map[] = { 
	    "node_bind", "name_connect", NULL } },

	{ "memprotect", { "mmap_zero", NULL } },

	{ "peer", { "recv", NULL } },

	{ "capability2", { "mac_override", "mac_admin", "syslog", NULL } },

	{ "capability2",

	  { "mac_override", "mac_admin", "syslog", "wake_alarm", "epollwakeup",

	    NULL } },

	{ "kernel_service", { "use_as_override", "create_files_as", NULL } },

	{ "tun_socket",

	  { COMMON_SOCK_PERMS, NULL } },