On Mon, May 06, 2013 at 09:55:52AM -0400, Christopher J. PeBenito wrote: > > Would it make sense to rename the "redhat1" capability as "ptrace_child" or > > so? The name "redhat1" seems quite different from the other ones > > (network_peer_controls, open_perms, always_check_network). > > The name matches what is in libsepol. So if we change libsepol we can also change this. > > > Also, what is that about? > > Not sure which item you're asking about. The redhat1 capability; in libsepol it has a comment that sais "reserved for RH testing of ptrace_child" but I don't seem to find any more references to it. What is the policy capability for (what does it do/enable)? Wkr, Sven Vermeulen -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
