The following series implements... --- Eric Paris (4): AUDIT: emit new record type showing all capset information AUDIT: audit when fcaps increase the permitted or inheritable capabilities AUDIT: output permitted and inheritable fcaps in PATH records CAPABILITIES: add cpu endian vfs caps structure include/linux/audit.h | 22 +++++ include/linux/capability.h | 12 +++ kernel/auditsc.c | 201 +++++++++++++++++++++++++++++++++++++++++++- kernel/capability.c | 3 + security/commoncap.c | 131 ++++++++++++++++------------- 5 files changed, 308 insertions(+), 61 deletions(-) -- Signature