Merge branch 'AkihiroSuda-kernel58'

capability/enum.go

@@ -41,7 +41,9 @@ const (
 //go:generate go run enumgen/gen.go
 type Cap int
 
-// POSIX-draft defined capabilities.
+// POSIX-draft defined capabilities and Linux extensions.
+//
+// Defined in https://github.com/torvalds/linux/blob/master/include/uapi/linux/capability.h
 const (
 	// In a system with the [_POSIX_CHOWN_RESTRICTED] option defined, this
 	// overrides the restriction of changing file ownership and group
@@ -293,6 +295,10 @@ const (
 	// CAP_PERFMON and CAP_BPF are required to load tracing programs.
 	// CAP_NET_ADMIN and CAP_BPF are required to load networking programs.
 	CAP_BPF = Cap(39)
+
+	// Allow checkpoint/restore related operations.
+	// Introduced in kernel 5.9
+	CAP_CHECKPOINT_RESTORE = Cap(40)
 )
 
 var (

capability/enum_gen.go

@@ -84,6 +84,8 @@ func (c Cap) String() string {
 		return "perfmon"
 	case CAP_BPF:
 		return "bpf"
+	case CAP_CHECKPOINT_RESTORE:
+		return "checkpoint_restore"
 	}
 	return "unknown"
 }
@@ -131,5 +133,6 @@ func List() []Cap {
 		CAP_AUDIT_READ,
 		CAP_PERFMON,
 		CAP_BPF,
+		CAP_CHECKPOINT_RESTORE,
 	}
 }