[Devel] [PATCH rh7] printk: allow to access syslog with CAP_VE_ADMIN

[Vladimir Davydov]

Ported from RH6.

Signed-off-by: Vladimir Davydov <vdavydov at parallels.com>
---
 kernel/printk.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/kernel/printk.c b/kernel/printk.c
index 51805a54eca7..52a0ab3f87e1 100644
--- a/kernel/printk.c
+++ b/kernel/printk.c
@@ -462,7 +462,8 @@ static int check_syslog_permissions(int type, bool from_file)
 		 * For historical reasons, accept CAP_SYS_ADMIN too, with
 		 * a warning.
 		 */
-		if (nsown_capable(CAP_SYS_ADMIN)) {
+		if (nsown_capable(CAP_SYS_ADMIN) ||
+		    nsown_capable(CAP_VE_ADMIN)) {
 			pr_warn_once("%s (%d): Attempt to access syslog with "
 				     "CAP_SYS_ADMIN but no CAP_SYSLOG "
 				     "(deprecated).\n",
-- 
2.1.4