lkml.org 
[lkml]   [2012]   [Sep]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 11/11] SELinux: define mapping for new Secure Boot capability
    Date
    From: Josh Boyer <jwboyer@redhat.com>

    Add the name of the new Secure Boot capability. This allows SELinux
    policies to properly map CAP_SECURE_FIRMWARE to the appropriate
    capability class.

    Signed-off-by: Josh Boyer <jwboyer@redhat.com>
    ---
    security/selinux/include/classmap.h | 4 ++--
    1 file changed, 2 insertions(+), 2 deletions(-)

    diff --git a/security/selinux/include/classmap.h b/security/selinux/include/classmap.h
    index df2de54..0a1e348 100644
    --- a/security/selinux/include/classmap.h
    +++ b/security/selinux/include/classmap.h
    @@ -146,8 +146,8 @@ struct security_class_mapping secclass_map[] = {
    { "memprotect", { "mmap_zero", NULL } },
    { "peer", { "recv", NULL } },
    { "capability2",
    - { "mac_override", "mac_admin", "syslog", "wake_alarm", "block_suspend",
    - NULL } },
    + { "mac_override", "mac_admin", "syslog", "wake_alarm",
    + "block_suspend", "secure_firmware", NULL } },
    { "kernel_service", { "use_as_override", "create_files_as", NULL } },
    { "tun_socket",
    { COMMON_SOCK_PERMS, NULL } },
    --
    1.7.11.4


    \
     
     \ /
      Last update: 2012-09-04 19:42    [W:0.023 / U:0.620 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site