2020-06-02 09:20:50

by Stefan Hajnoczi

Subject: [PATCH v2] capabilities: add description for CAP_SETFCAP

Document the purpose of CAP_SETFCAP. For some reason this capability
had no description while the others did.

Signed-off-by: Stefan Hajnoczi <[email protected]>
---
v2:
* Rebased onto git master

include/uapi/linux/capability.h | 2 ++
1 file changed, 2 insertions(+)

diff --git a/include/uapi/linux/capability.h b/include/uapi/linux/capability.h
index e58c9636741b..c4532b0fe00f 100644
--- a/include/uapi/linux/capability.h
+++ b/include/uapi/linux/capability.h
@@ -332,6 +332,8 @@ struct vfs_ns_cap_data {

#define CAP_AUDIT_CONTROL 30

+/* Set or remove capabilities on files */
+
#define CAP_SETFCAP 31

/* Override MAC access.
--
2.25.4

2020-06-02 23:27:48

by James Morris

Subject: Re: [PATCH v2] capabilities: add description for CAP_SETFCAP

On Tue, 2 Jun 2020, Stefan Hajnoczi wrote:

> Document the purpose of CAP_SETFCAP. For some reason this capability
> had no description while the others did.
>
> Signed-off-by: Stefan Hajnoczi <[email protected]>

Thanks.

Applied to
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next-general


--
James Morris
<[email protected]>