Add CAP_AUDIT_READ

CAP_AUDIT_READ (since Linux 3.16) Allow reading the audit log via a multicast netlink socket. Signed-off-by: Christian Brauner <christianvanbrauner@gmail.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

Add CAP_AUDIT_READ
5eb6e03a · Christian Brauner · Stéphane Graber · a6f05267 · 5eb6e03a
Commit 5eb6e03a authored Sep 27, 2015 by Christian Brauner Committed by Stéphane Graber Sep 29, 2015
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

conf.c src/lxc/conf.c +3 -0

No files found.
--- a/src/lxc/conf.c
+++ b/src/lxc/conf.c
@@ -284,6 +284,9 @@ static struct caps_opt caps_opt[] = {
 	{ "sys_tty_config",    CAP_SYS_TTY_CONFIG    },
 	{ "mknod",             CAP_MKNOD             },
 	{ "lease",             CAP_LEASE             },
+#ifdef CAP_AUDIT_READ
+	{ "audit_read",        CAP_AUDIT_READ        },
+#endif
 #ifdef CAP_AUDIT_WRITE
 	{ "audit_write",       CAP_AUDIT_WRITE       },
 #endif