On Mon, 13 Oct 2008, Steve Grubb wrote: > Then does this need some updating in avc.c ? > > 570 case AVC_AUDIT_DATA_CAP: > 571 audit_log_format(ab, " capability=%d", a->u.cap); > 572 break; Nope, the capability number is correctly recorded in a->u.cap, and you'll also see capability2 as the tclass value. - James -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
