analyze: CAP_RAWIO -> CAP_SYS_RAWIO

Fixes #16489
This commit is contained in:
Anita Zhang
2020-07-16 21:14:59 +02:00
committed by Zbigniew Jędrzejewski-Szmek
parent d96edb2c6e
commit b5ef66101a
+1 -1
View File
@@ -914,7 +914,7 @@ static const struct security_assessor security_assessor_table[] = {
.parameter = (UINT64_C(1) << CAP_NET_ADMIN),
},
{
.id = "CapabilityBoundingSet=~CAP_RAWIO",
.id = "CapabilityBoundingSet=~CAP_SYS_RAWIO",
.description_good = "Service has no raw I/O access",
.description_bad = "Service has raw I/O access",
.url = "https://www.freedesktop.org/software/systemd/man/systemd.exec.html#CapabilityBoundingSet=",