]> git.proxmox.com Git - mirror_lxc.git/commitdiff
conf: define missing capabilities
authorChristian Brauner <christian.brauner@ubuntu.com>
Mon, 4 Jan 2021 09:50:07 +0000 (10:50 +0100)
committerChristian Brauner <christian.brauner@ubuntu.com>
Wed, 6 Jan 2021 13:13:52 +0000 (14:13 +0100)
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
src/lxc/conf.c
src/lxc/macro.h

index fc36a0d9d30fda7f9b9ea8d2a39126c7dffc0cee..09a9401f147591b8827acaf2d29df9c3efd49e79 100644 (file)
@@ -210,28 +210,16 @@ static struct caps_opt caps_opt[] = {
        { "sys_tty_config",   CAP_SYS_TTY_CONFIG   },
        { "mknod",            CAP_MKNOD            },
        { "lease",            CAP_LEASE            },
-#ifdef CAP_AUDIT_READ
        { "audit_read",       CAP_AUDIT_READ       },
-#endif
-#ifdef CAP_AUDIT_WRITE
        { "audit_write",      CAP_AUDIT_WRITE      },
-#endif
-#ifdef CAP_AUDIT_CONTROL
        { "audit_control",    CAP_AUDIT_CONTROL    },
-#endif
        { "setfcap",          CAP_SETFCAP          },
        { "mac_override",     CAP_MAC_OVERRIDE     },
        { "mac_admin",        CAP_MAC_ADMIN        },
-#ifdef CAP_SYSLOG
        { "syslog",           CAP_SYSLOG           },
-#endif
-#ifdef CAP_WAKE_ALARM
        { "wake_alarm",       CAP_WAKE_ALARM       },
-#endif
-#ifdef CAP_BLOCK_SUSPEND
        { "block_suspend",    CAP_BLOCK_SUSPEND    },
 #endif
-#endif
 };
 
 static struct limit_opt limit_opt[] = {
index a4d0d298f0a9e119e55a570639b6aae31d906fcb..42fb349479b72210ac3e5933b0b6bfe1cdc53c3d 100644 (file)
 #define CAP_SYS_ADMIN 21
 #endif
 
+#ifndef CAP_AUDIT_WRITE
+#define CAP_AUDIT_WRITE 29
+#endif
+
+#ifndef CAP_AUDIT_CONTROL
+#define CAP_AUDIT_CONTROL 30
+#endif
+
 #ifndef CAP_SETFCAP
 #define CAP_SETFCAP 31
 #endif
 #define CAP_MAC_ADMIN 33
 #endif
 
+#ifndef CAP_SYSLOG
+#define CAP_SYSLOG 34
+#endif
+
+#ifndef CAP_WAKE_ALARM
+#define CAP_WAKE_ALARM 35
+#endif
+
+#ifndef CAP_BLOCK_SUSPEND
+#define CAP_BLOCK_SUSPEND 36
+#endif
+
+#ifndef CAP_AUDIT_READ
+#define CAP_AUDIT_READ 37
+#endif
+
 /* prctl */
 #ifndef PR_CAPBSET_READ
 #define PR_CAPBSET_READ 23