History

audit: add netlink audit protocol bind to check capabilities on multicast join

Register a netlink per-protocol bind fuction for audit to check userspace process capabilities before allowing a multicast group connection.

Richard Guy Briggs committed 12 years ago

Commit 3a101b81 parent 7774d5e3 files · +17 −2Browse files

Showing the changes to include/uapi/linux (1 of 3 files). Show all

Unified · Split

include/uapi/linux/capability.h+6−1
@@ -347,7 +347,12 @@ struct vfs_cap_data { · 346 unmodified lines
347347
348348 #define CAP_BLOCK_SUSPEND 36
349349
350−#define CAP_LAST_CAP CAP_BLOCK_SUSPEND
350+/* Allow reading the audit log via multicast netlink socket */
351+
352+#define CAP_AUDIT_READ 37
353+
354+
355+#define CAP_LAST_CAP CAP_AUDIT_READ
351356
352357 #define cap_valid(x) ((x) >= 0 && (x) <= CAP_LAST_CAP)
353358