Add CAP_AUDIT_READ

CAP_AUDIT_READ (since Linux 3.16)
    Allow reading the audit log via a multicast netlink socket.

Signed-off-by: Christian Brauner <christianvanbrauner@gmail.com>
Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

diff --git a/src/lxc/conf.c b/src/lxc/conf.c
index 6cbb98da6b883b26112d75cf473df2d9a683b15d..02cfc7ac10eef507f447ffb4853610920d0bf53e 100644 (file)
--- a/src/lxc/conf.c
+++ b/src/lxc/conf.c
@@ -284,6 +284,9 @@ static struct caps_opt caps_opt[] = {
        { "sys_tty_config",    CAP_SYS_TTY_CONFIG    },
        { "mknod",             CAP_MKNOD             },
        { "lease",             CAP_LEASE             },
+#ifdef CAP_AUDIT_READ
+       { "audit_read",        CAP_AUDIT_READ        },
+#endif
 #ifdef CAP_AUDIT_WRITE
        { "audit_write",       CAP_AUDIT_WRITE       },
 #endif