[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

[Sven Vermeulen]

commit:     82d98c88d39b643eff0cd53679cd9374d33e7062
Author:     cgzones <cgzones <AT> googlemail <DOT> com>
AuthorDate: Fri Jan  6 14:01:45 2017 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Fri Jan 13 18:39:05 2017 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=82d98c88

update unconfined module * grant capability2:wake_alarm * remove deprecated 
interfaces

 policy/modules/system/unconfined.if | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/system/unconfined.if 
b/policy/modules/system/unconfined.if
index 78f9c14..3bf6605 100644
--- a/policy/modules/system/unconfined.if
+++ b/policy/modules/system/unconfined.if
@@ -20,7 +20,7 @@ interface(`unconfined_domain_noaudit',`
 
        # Use most Linux capabilities
        allow $1 self:capability ~sys_module;
-       allow $1 self:capability2 syslog;
+       allow $1 self:capability2 { syslog wake_alarm };
        allow $1 self:fifo_file manage_fifo_file_perms;
 
        # Transition to myself, to make get_ordered_context_list happy.