Add CAP_BPF and CAP_PERFMON to severity.db

These capabilities were introduced in Linux 5.8

References: https://bugs.launchpad.net/bugs/1890547
This commit is contained in:
Christian Boltz 2020-08-07 22:37:19 +02:00
parent 04a1c9dbf1
commit ae01250209
Failed to generate hash of commit

View file

@ -2,6 +2,7 @@
#
# Copyright (C) 2002-2005 Novell/SUSE
# Copyright (C) 2014 Canonical Ltd.
# Copyright (C) 2020 Christian Boltz
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
@ -28,6 +29,7 @@
CAP_SETGID 9
CAP_SETUID 9
CAP_FOWNER 9
CAP_BPF 9
# Denial of service, bypass audit controls, information leak
CAP_SYS_TIME 8
CAP_NET_ADMIN 8
@ -49,6 +51,7 @@
CAP_BLOCK_SUSPEND 8
CAP_DAC_READ_SEARCH 7
CAP_AUDIT_READ 7
CAP_PERFMON 7
# unused
CAP_NET_BROADCAST 0