Hi Stefan, Denis, mac_admin_ns_capable() is being introduced in this patch. Either rename the "Subject" line as "ima: replace capable() call with ns_capable()" or "ima: define mac_admin_ns_capable() as a wrapper for ns_capable()". On Tue, 2022-01-04 at 12:04 -0500, Stefan Berger wrote: > From: Stefan Berger <stefanb@xxxxxxxxxxxxx> > > Use mac_admin_ns_capable() to check corresponding capability to allow > read/write IMA policy without CAP_SYS_ADMIN but with CAP_MAC_ADMIN. Updatethe patch description accordingly. > > Signed-off-by: Denis Semakin <denis.semakin@xxxxxxxxxx> > Signed-off-by: Stefan Berger <stefanb@xxxxxxxxxxxxx> thanks, Mimi
