summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorEric Paris <eparis@redhat.com>2012-07-06 14:13:29 -0400
committerJames Morris <james.l.morris@oracle.com>2012-07-16 11:40:31 +1000
commit64919e60915c5151b3dd4c8d2d9237a115ca990c (patch)
tree712cbc272e15a3b3fe70f27a1ac1d7c57bf2300c
parent918227bb1b59444a2c467711fd50cc22bb4a897b (diff)
downloadlinux-64919e60915c5151b3dd4c8d2d9237a115ca990c.tar.gz
linux-64919e60915c5151b3dd4c8d2d9237a115ca990c.tar.bz2
linux-64919e60915c5151b3dd4c8d2d9237a115ca990c.zip
SELinux: include definition of new capabilities
The kernel has added CAP_WAKE_ALARM and CAP_EPOLLWAKEUP. We need to define these in SELinux so they can be mediated by policy. Signed-off-by: Eric Paris <eparis@redhat.com> Signed-off-by: James Morris <james.l.morris@oracle.com>
-rw-r--r--security/selinux/include/classmap.h4
1 files changed, 3 insertions, 1 deletions
diff --git a/security/selinux/include/classmap.h b/security/selinux/include/classmap.h
index b8c53723e09b..0b04fd9e9e3e 100644
--- a/security/selinux/include/classmap.h
+++ b/security/selinux/include/classmap.h
@@ -145,7 +145,9 @@ struct security_class_mapping secclass_map[] = {
"node_bind", "name_connect", NULL } },
{ "memprotect", { "mmap_zero", NULL } },
{ "peer", { "recv", NULL } },
- { "capability2", { "mac_override", "mac_admin", "syslog", NULL } },
+ { "capability2",
+ { "mac_override", "mac_admin", "syslog", "wake_alarm", "epollwakeup",
+ NULL } },
{ "kernel_service", { "use_as_override", "create_files_as", NULL } },
{ "tun_socket",
{ COMMON_SOCK_PERMS, NULL } },