From: Max Chernoff <git@maxchernoff.ca>
To: Alejandro Colomar <alx@kernel.org>
Cc: Max Chernoff <git@maxchernoff.ca>, linux-man@vger.kernel.org
Subject: [PATCH 3/3] man/man7/capabilities.7: CAP_MAC_ADMIN allows setting undefined SELinux contexts
Date: Sat, 12 Sep 2026 05:32:13 -0600 [thread overview]
Message-ID: <bed5f1b68369af7e6a5cd5ebae8eb8ecfa7ef441.1789212041.git.git@maxchernoff.ca> (raw)
In-Reply-To: <2129b0c39ad5248641f24b43a4b1750bb62be43f.1789212041.git.git@maxchernoff.ca>
Link: <https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=12b29f34558b9b45a2c6eabd4f3c6be939a3980f>
Signed-off-by: Max Chernoff <git@maxchernoff.ca>
---
man/man7/capabilities.7 | 12 ++++++++++--
1 file changed, 10 insertions(+), 2 deletions(-)
diff --git a/man/man7/capabilities.7 b/man/man7/capabilities.7
index bb8f6d9db433..8813ff81f0ea 100644
--- a/man/man7/capabilities.7
+++ b/man/man7/capabilities.7
@@ -210,8 +210,16 @@
.BR FS_IOC_SETFLAGS (2const)).
.TP
.BR CAP_MAC_ADMIN " (since Linux 2.6.25)"
-Allow MAC configuration or state changes.
-Implemented for the Smack Linux Security Module (LSM).
+.RS
+.IP \[bu] 3
+.PD 0
+For the Smack Linux Security Module (LSM),
+allow MAC configuration or state changes;
+.IP \[bu]
+For the SELinux LSM,
+allow setting undefined security contexts on inodes (since Linux 2.6.27).
+.RE
+.PD
.TP
.BR CAP_MAC_OVERRIDE " (since Linux 2.6.25)"
Override Mandatory Access Control (MAC).
--
2.55.0
next prev parent reply other threads:[~2026-09-12 11:33 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-12 11:32 [PATCH 1/3] man/man5/proc_pid_smaps{,_rollup}.5: Add proc_pid_smaps_rollup(5) Max Chernoff
2026-09-12 11:32 ` [PATCH 2/3] man/man5/proc_pid_{smaps,smaps_rollup,maps}.5, man/man7/capabilities.7: CAP_PERFMON allows reading /proc/pid/{smaps,smaps_rollup,maps} Max Chernoff
2026-09-12 13:39 ` Alejandro Colomar
2026-09-12 11:32 ` Max Chernoff [this message]
2026-09-12 13:41 ` [PATCH 3/3] man/man7/capabilities.7: CAP_MAC_ADMIN allows setting undefined SELinux contexts Alejandro Colomar
2026-09-12 13:35 ` [PATCH 1/3] man/man5/proc_pid_smaps{,_rollup}.5: Add proc_pid_smaps_rollup(5) Alejandro Colomar
2026-09-14 11:51 ` [PATCH v2 0/4] /proc/pid/smaps_rollup + CAP_MAC_ADMIN Max Chernoff
2026-09-14 11:51 ` [PATCH v2 1/4] man/man5/proc_pid_smaps.5: Add description Max Chernoff
2026-09-14 11:51 ` [PATCH v2 2/4] man/man5/proc_pid_smaps{,_rollup}.5: Add proc_pid_smaps_rollup(5) Max Chernoff
2026-09-14 11:51 ` [PATCH v2 3/4] man/man5/proc_pid_{smaps,smaps_rollup,maps}.5, man/man7/capabilities.7: CAP_PERFMON allows reading /proc/pid/{smaps,smaps_rollup,maps} Max Chernoff
2026-09-14 11:51 ` [PATCH v2 4/4] man/man7/capabilities.7: CAP_MAC_ADMIN allows setting undefined SELinux contexts Max Chernoff
2026-09-17 12:06 ` [PATCH v2 0/4] /proc/pid/smaps_rollup + CAP_MAC_ADMIN Alejandro Colomar
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=bed5f1b68369af7e6a5cd5ebae8eb8ecfa7ef441.1789212041.git.git@maxchernoff.ca \
--to=git@maxchernoff.ca \
--cc=alx@kernel.org \
--cc=linux-man@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox