Constant CAP_MAC_ADMIN
pub const CAP_MAC_ADMIN: i32 = 33;Available on crate feature
dep_nc only.Expand description
Allow MAC configuration or state changes.
The base kernel requires no MAC configuration.
An LSM may enforce a MAC policy, and if it does and it chooses to implement capability based checks on modifications to that policy or the data required to maintain it, this is the capability it should use to do so.