History

audit: add netlink audit protocol bind to check capabilities on multicast join

Register a netlink per-protocol bind fuction for audit to check userspace process capabilities before allowing a multicast group connection.

Richard Guy Briggs committed 12 years ago

Commit 3a101b81 parent 7774d5e3 files · +17 −2Browse files

Showing the changes to include/uapi/linux (1 of 3 files). Show all

Unified · Split

include/uapi/linux/capability.h+6−1
@@ -347,7 +347,12 @@ struct vfs_cap_data { · 346 unmodified lines
347 347
348#define CAP_BLOCK_SUSPEND 36348#define CAP_BLOCK_SUSPEND 36
349 349
350#define CAP_LAST_CAP CAP_BLOCK_SUSPEND350/* Allow reading the audit log via multicast netlink socket */
351
352#define CAP_AUDIT_READ 37
353
354
355#define CAP_LAST_CAP CAP_AUDIT_READ
351 356
352#define cap_valid(x) ((x) >= 0 && (x) <= CAP_LAST_CAP)357#define cap_valid(x) ((x) >= 0 && (x) <= CAP_LAST_CAP)
353 358