lkml.org 
[lkml]   [2012]   [Sep]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH V2 10/10] SELinux: define mapping for new Secure Boot capability
    Date
    From: Josh Boyer <jwboyer@redhat.com>

    Add the name of the new Secure Boot capability. This allows SELinux
    policies to properly map CAP_COMPROMISE_KERNEL to the appropriate
    capability class.

    Signed-off-by: Josh Boyer <jwboyer@redhat.com>
    ---
    security/selinux/include/classmap.h | 4 ++--
    1 file changed, 2 insertions(+), 2 deletions(-)

    diff --git a/security/selinux/include/classmap.h b/security/selinux/include/classmap.h
    index df2de54..70e2834 100644
    --- a/security/selinux/include/classmap.h
    +++ b/security/selinux/include/classmap.h
    @@ -146,8 +146,8 @@ struct security_class_mapping secclass_map[] = {
    { "memprotect", { "mmap_zero", NULL } },
    { "peer", { "recv", NULL } },
    { "capability2",
    - { "mac_override", "mac_admin", "syslog", "wake_alarm", "block_suspend",
    - NULL } },
    + { "mac_override", "mac_admin", "syslog", "wake_alarm",
    + "block_suspend", "compromise_kernel", NULL } },
    { "kernel_service", { "use_as_override", "create_files_as", NULL } },
    { "tun_socket",
    { COMMON_SOCK_PERMS, NULL } },
    --
    1.7.11.4


    \
     
     \ /
      Last update: 2012-09-20 17:41    [W:4.026 / U:0.104 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site