--- parser/parser_misc.c | 4 ++++ profiles/apparmor.d/sbin.klogd | 1 + 2 files changed, 5 insertions(+) --- a/parser/parser_misc.c +++ b/parser/parser_misc.c @@ -122,6 +122,9 @@ static int get_table_token(const char *n static struct keyword_table capability_table[] = { /* capabilities */ #include "cap_names.h" +#ifndef CAP_SYSLOG + {"syslog", 34}, +#endif /* terminate */ {NULL, 0} }; @@ -820,6 +823,7 @@ static const char *capnames[] = { "audit_control", "setfcap", "mac_override" + "syslog", }; const char *capability_to_name(unsigned int cap) --- a/profiles/apparmor.d/sbin.klogd +++ b/profiles/apparmor.d/sbin.klogd @@ -15,6 +15,7 @@ #include capability sys_admin, + capability syslog, network inet stream,