From: Christian Brauner <christianvanbrauner@gmail.com>
Date: Sun, 27 Sep 2015 10:16:54 +0000 (+0200)
Subject: Add CAP_AUDIT_READ
X-Git-Tag: lxc-1.0.8~28
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7fb47854a80cde338a0aa5165b5b03a679586439;p=thirdparty%2Flxc.git

Add CAP_AUDIT_READ

CAP_AUDIT_READ (since Linux 3.16)
    Allow reading the audit log via a multicast netlink socket.

Signed-off-by: Christian Brauner <christianvanbrauner@gmail.com>
Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>
---

diff --git a/src/lxc/conf.c b/src/lxc/conf.c
index bbc8f6ff9..4f8d7b3b6 100644
--- a/src/lxc/conf.c
+++ b/src/lxc/conf.c
@@ -275,6 +275,9 @@ static struct caps_opt caps_opt[] = {
 	{ "sys_tty_config",    CAP_SYS_TTY_CONFIG    },
 	{ "mknod",             CAP_MKNOD             },
 	{ "lease",             CAP_LEASE             },
+#ifdef CAP_AUDIT_READ
+	{ "audit_read",        CAP_AUDIT_READ        },
+#endif
 #ifdef CAP_AUDIT_WRITE
 	{ "audit_write",       CAP_AUDIT_WRITE       },
 #endif