selinux: use kernel linux/socket.h for genheaders and mdp

[mirror_ubuntu-bionic-kernel.git] / security / selinux / include / classmap.h

diff --git a/security/selinux/include/classmap.h b/security/selinux/include/classmap.h
index cc35695d97b4a6682702a2405f1ca38a258d9f50..5ae315ab060be09fac474ef71f18c33463391ba6 100644 (file)
--- a/security/selinux/include/classmap.h
+++ b/security/selinux/include/classmap.h
@@ -1,5 +1,6 @@
 /* SPDX-License-Identifier: GPL-2.0 */
 #include <linux/capability.h>
+#include <linux/socket.h>
 
 #define COMMON_FILE_SOCK_PERMS "ioctl", "read", "write", "create", \
     "getattr", "setattr", "lock", "relabelfrom", "relabelto", "append", "map"
@@ -238,6 +239,8 @@ struct security_class_mapping secclass_map[] = {
          { "access", NULL } },
        { "infiniband_endport",
          { "manage_subnet", NULL } },
+       { "bpf",
+         {"map_create", "map_read", "map_write", "prog_load", "prog_run"} },
        { NULL }
   };