Pull lockdown update from James Morris: "An update for the security subsystem to allow unprivileged users to see the status of the lockdown feature. From Jeremy Cline" Also an added comment to describe CAP_SETFCAP. * 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: capabilities: add description for CAP_SETFCAP lockdown: Allow unprivileged users to see lockdown status
Showing the changes to include/uapi/linux (1 of 2 files). Show all
Unified · Split
| @@ -332,6 +332,8 @@ struct vfs_ns_cap_data { · 331 unmodified lines | ||
| 332 | 332 | |
| 333 | 333 | #define CAP_AUDIT_CONTROL 30 |
| 334 | 334 | |
| 335 | +/* Set or remove capabilities on files */ | |
| 336 | + | |
| 335 | 337 | #define CAP_SETFCAP 31 |
| 336 | 338 | |
| 337 | 339 | /* Override MAC access. |