SELinux: include definition of new capabilities

[~andy/linux] / security / selinux / include / classmap.h

diff --git a/security/selinux/include/classmap.h b/security/selinux/include/classmap.h
index b8c53723e09bfe7d6c211bc05df35793ae9ac8b2..0b04fd9e9e3e95bbc6a664be5b80e2b0407f6b3f 100644 (file)
--- a/security/selinux/include/classmap.h
+++ b/security/selinux/include/classmap.h
@@ -145,7 +145,9 @@ struct security_class_mapping secclass_map[] = {
            "node_bind", "name_connect", NULL } },
        { "memprotect", { "mmap_zero", NULL } },
        { "peer", { "recv", NULL } },
-       { "capability2", { "mac_override", "mac_admin", "syslog", NULL } },
+       { "capability2",
+         { "mac_override", "mac_admin", "syslog", "wake_alarm", "epollwakeup",
+           NULL } },
        { "kernel_service", { "use_as_override", "create_files_as", NULL } },
        { "tun_socket",
          { COMMON_SOCK_PERMS, NULL } },