shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-03-11 20:58:27 +03:00
Code

analyze: CAP_RAWIO -> CAP_SYS_RAWIO

Browse Source 
Fixes #16489
This commit is contained in:
Anita Zhang 2020-07-16 11:36:28 -07:00 committed by Zbigniew Jędrzejewski-Szmek
parent d96edb2c6e
commit b5ef66101a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/analyze/analyze-security.c
View File

@ -914,7 +914,7 @@ static const struct security_assessor security_assessor_table[] = {
.parameter = (UINT64_C(1) << CAP_NET_ADMIN),
},
{
.id = "CapabilityBoundingSet=~CAP_RAWIO",
.id = "CapabilityBoundingSet=~CAP_SYS_RAWIO",
.description_good = "Service has no raw I/O access",
.description_bad = "Service has raw I/O access",
.url = "https://www.freedesktop.org/software/systemd/man/systemd.exec.html#CapabilityBoundingSet=",