picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

analyze: CAP_RAWIO -> CAP_SYS_RAWIO 

Fixes #16489
This commit is contained in:
Anita Zhang 2020-07-16 11:36:28 -07:00 committed by Zbigniew Jędrzejewski-Szmek
parent d96edb2c6e
commit b5ef66101a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/analyze/analyze-security.c
View File

@ -914,7 +914,7 @@ static const struct security_assessor security_assessor_table[] = {
.parameter = (UINT64_C(1) << CAP_NET_ADMIN),
},
{
.id = "CapabilityBoundingSet=~CAP_RAWIO",
.id = "CapabilityBoundingSet=~CAP_SYS_RAWIO",
.description_good = "Service has no raw I/O access",
.description_bad = "Service has raw I/O access",
.url = "https://www.freedesktop.org/software/systemd/man/systemd.exec.html#CapabilityBoundingSet=",