1
1
mirror of https://github.com/systemd/systemd-stable.git synced 2025-03-13 12:58:20 +03:00

Fix typo in CAP_BPF description (#33464)

description_good and description_bad are mixed up. Disabling CAP_BPF results in the inability to load BPF, not the other way around.

(cherry picked from commit 1750e30d237e6d9cdebc6b546d0a26342828dbd1)
(cherry picked from commit 8e775590f1b25d399fdffa0279a2e244d7afff23)
(cherry picked from commit f685b22f073b8d56c5c5fcbb87037e8322386e29)
(cherry picked from commit d18ad2b053d3e540983be40c45e46798bb0a993e)
This commit is contained in:
Eugeny Shcheglov 2024-06-24 21:23:50 +03:00 committed by Luca Boccassi
parent 44f134ac0a
commit 3006fb94bc

View File

@ -1254,8 +1254,8 @@ static const struct security_assessor security_assessor_table[] = {
{
.id = "CapabilityBoundingSet=~CAP_BPF",
.json_field = "CapabilityBoundingSet_CAP_BPF",
.description_good = "Service may load BPF programs",
.description_bad = "Service may not load BPF programs",
.description_good = "Service may not load BPF programs",
.description_bad = "Service may load BPF programs",
.url = "https://www.freedesktop.org/software/systemd/man/systemd.exec.html#CapabilityBoundingSet=",
.weight = 25,
.range = 1,