conf: add new capabilities CAP_{BLOCK_SUSPEND,PERFMON,BPF,CAP_CHECKPOINT_RESTORE}

src/lxc/conf.c

@@ -210,7 +210,6 @@ static struct caps_opt caps_opt[] = {
 	{ "sys_tty_config",     CAP_SYS_TTY_CONFIG     },
 	{ "mknod",              CAP_MKNOD              },
 	{ "lease",              CAP_LEASE              },
-	{ "audit_read",       CAP_AUDIT_READ       },
 	{ "audit_write",        CAP_AUDIT_WRITE        },
 	{ "audit_control",      CAP_AUDIT_CONTROL      },
 	{ "setfcap",            CAP_SETFCAP            },
@@ -219,6 +218,10 @@ static struct caps_opt caps_opt[] = {
 	{ "syslog",             CAP_SYSLOG             },
 	{ "wake_alarm",         CAP_WAKE_ALARM         },
 	{ "block_suspend",      CAP_BLOCK_SUSPEND      },
+	{ "audit_read",         CAP_AUDIT_READ         },
+	{ "perfmon",            CAP_PERFMON            },
+	{ "bpf",                CAP_BPF                },
+	{ "checkpoint_restore", CAP_CHECKPOINT_RESTORE },
 #endif
 };
 

src/lxc/macro.h

@@ -85,6 +85,18 @@
 #define CAP_AUDIT_READ 37
 #endif
 
+#ifndef CAP_PERFMON
+#define CAP_PERFMON 38
+#endif
+
+#ifndef CAP_BPF
+#define CAP_BPF 39
+#endif
+
+#ifndef CAP_CHECKPOINT_RESTORE
+#define CAP_CHECKPOINT_RESTORE 40
+#endif
+
 /* prctl */
 #ifndef PR_CAPBSET_READ
 #define PR_CAPBSET_READ 23