openstack/oslo.privsep
Code Issues Proposed changes

add new kernel capabilities

Browse Source 
CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE
are added.

Change-Id: I5f7758b7284fc16251cccd9114c3ec0e4cc95f93
Signed-off-by: Sven Kieske <kieske@osism.tech>
This commit is contained in:
Sven Kieske 2023-10-26 15:15:48 +02:00
parent 121b2fbac2
commit a2fe33adb8
No known key found for this signature in database
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
oslo_privsep/capabilities.py
View File

@ -24,7 +24,7 @@ class Capabilities(enum.IntEnum):
# Generated with: # Generated with:
# awk '/^#define CAP_[A-Z_]+[ \t]+[0-9]+/ {print $2,"=",$3}' \ # awk '/^#define CAP_[A-Z_]+[ \t]+[0-9]+/ {print $2,"=",$3}' \
# include/uapi/linux/capability.h # include/uapi/linux/capability.h
# From the 4.11.11 kernel and the kernel git SHA:235b84fc862 # From the 6.6.6 kernel and the kernel git SHA:0c38b88c3323
# Will need to be refreshed as new capabilites are added to the kernel # Will need to be refreshed as new capabilites are added to the kernel
CAP_CHOWN = 0 CAP_CHOWN = 0
CAP_DAC_OVERRIDE = 1 CAP_DAC_OVERRIDE = 1
@ -64,6 +64,9 @@ class Capabilities(enum.IntEnum):
CAP_WAKE_ALARM = 35 CAP_WAKE_ALARM = 35
CAP_BLOCK_SUSPEND = 36 CAP_BLOCK_SUSPEND = 36
CAP_AUDIT_READ = 37 CAP_AUDIT_READ = 37
CAP_PERFMON = 38
CAP_BPF = 39
CAP_CHECKPOINT_RESTORE = 40
CAPS_BYNAME = {} CAPS_BYNAME = {}