commit: 82d98c88d39b643eff0cd53679cd9374d33e7062 Author: cgzones <cgzones <AT> googlemail <DOT> com> AuthorDate: Fri Jan 6 14:01:45 2017 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Fri Jan 13 18:39:05 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=82d98c88
update unconfined module * grant capability2:wake_alarm * remove deprecated interfaces policy/modules/system/unconfined.if | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/system/unconfined.if b/policy/modules/system/unconfined.if index 78f9c14..3bf6605 100644 --- a/policy/modules/system/unconfined.if +++ b/policy/modules/system/unconfined.if @@ -20,7 +20,7 @@ interface(`unconfined_domain_noaudit',` # Use most Linux capabilities allow $1 self:capability ~sys_module; - allow $1 self:capability2 syslog; + allow $1 self:capability2 { syslog wake_alarm }; allow $1 self:fifo_file manage_fifo_file_perms; # Transition to myself, to make get_ordered_context_list happy.