* what is cap_userns?
@ 2020-04-11 3:21 Russell Coker
2020-04-14 14:23 ` Chris PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Russell Coker @ 2020-04-11 3:21 UTC (permalink / raw)
To: selinux-refpolicy
allow sysadm_t self:cap_userns sys_ptrace;
The above is from audit2allow. Do we need macros to grant all user domains
this sort of access?
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: what is cap_userns?
2020-04-11 3:21 what is cap_userns? Russell Coker
@ 2020-04-14 14:23 ` Chris PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Chris PeBenito @ 2020-04-14 14:23 UTC (permalink / raw)
To: Russell Coker, selinux-refpolicy
On 4/10/20 11:21 PM, Russell Coker wrote:
> allow sysadm_t self:cap_userns sys_ptrace;
>
> The above is from audit2allow. Do we need macros to grant all user domains
> this sort of access?
This is a capability in a user namespace.
--
Chris PeBenito
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2020-04-14 15:06 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2020-04-11 3:21 what is cap_userns? Russell Coker
2020-04-14 14:23 ` Chris PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.