817199e006
This commit reverts 5b0eea835d ("selinux: introduce an initial SID
for early boot processes") as it was found to cause problems on
distros with old SELinux userspace tools/libraries, specifically
Ubuntu 16.04.
Hopefully we will be able to re-add this functionality at a later
date, but let's revert this for now to help ensure a stable and
backwards compatible SELinux tree.
Link: https://lore.kernel.org/selinux/87edkseqf8.fsf@mail.lhotse
Acked-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
21 lines
557 B
C
21 lines
557 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifndef _SELINUX_POLICYCAP_H_
|
|
#define _SELINUX_POLICYCAP_H_
|
|
|
|
/* Policy capabilities */
|
|
enum {
|
|
POLICYDB_CAP_NETPEER,
|
|
POLICYDB_CAP_OPENPERM,
|
|
POLICYDB_CAP_EXTSOCKCLASS,
|
|
POLICYDB_CAP_ALWAYSNETWORK,
|
|
POLICYDB_CAP_CGROUPSECLABEL,
|
|
POLICYDB_CAP_NNP_NOSUID_TRANSITION,
|
|
POLICYDB_CAP_GENFS_SECLABEL_SYMLINKS,
|
|
POLICYDB_CAP_IOCTL_SKIP_CLOEXEC,
|
|
__POLICYDB_CAP_MAX
|
|
};
|
|
#define POLICYDB_CAP_MAX (__POLICYDB_CAP_MAX - 1)
|
|
|
|
extern const char *const selinux_policycap_names[__POLICYDB_CAP_MAX];
|
|
|
|
#endif /* _SELINUX_POLICYCAP_H_ */
|