Linux has added a new capability audit_read

rhatdan · rhatdan · commit 00abcf89d9ad · 2015-02-24T08:09:32.000-05:00
Docker-DCO-1.1-Signed-off-by: Dan Walsh &lt;dwalsh@redhat.com&gt; (github: rhatdan)
diff --git a/capabilities_linux.go b/capabilities_linux.go
@@ -49,6 +49,7 @@ var capabilityList = map[string]capability.Cap{
 	"SETFCAP":          capability.CAP_SETFCAP,
 	"WAKE_ALARM":       capability.CAP_WAKE_ALARM,
 	"BLOCK_SUSPEND":    capability.CAP_BLOCK_SUSPEND,
+	"AUDIT_READ":       capability.CAP_AUDIT_READ,
 }
 
 func newCapWhitelist(caps []string) (*whitelist, error) {

Original file line number	Diff line number	Diff line change
`@@ -49,6 +49,7 @@ var capabilityList = map[string]capability.Cap{`
`49`	`49`	`"SETFCAP": capability.CAP_SETFCAP,`
`50`	`50`	`"WAKE_ALARM": capability.CAP_WAKE_ALARM,`
`51`	`51`	`"BLOCK_SUSPEND": capability.CAP_BLOCK_SUSPEND,`
	`52`	`+ "AUDIT_READ": capability.CAP_AUDIT_READ,`
`52`	`53`	`}`
`53`	`54`
`54`	`55`	`func newCapWhitelist(caps []string) (*whitelist, error) {`