notebook: add section for user_namespace security class

Signed-off-by: Christian Göttsche <[email protected]> Reviewed-by: Daniel Burgener <[email protected]> Reviewed-by: Stephen Smalley <[email protected]> Signed-off-by: Paul Moore <[email protected]>
SELinuxProject · Jul 27, 2023 · 34f8600 · 34f8600
1 parent 4b50402
commit 34f8600
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/src/object_classes_permissions.md b/src/object_classes_permissions.md
@@ -89,6 +89,7 @@
     - [*key*](#key)
     - [*memprotect*](#memprotect)
     - [*binder*](#binder)
+    - [*user_namespace*](#user_namespace)
   - [Capability Object Classes](#capability-object-classes)
     - [*capability*](#capability)
     - [*capability2*](#capability2)
@@ -2143,6 +2144,16 @@ Manage the Binder IPC service.
 - Transfer a binder reference to another process (can A transfer a binder
   reference to B?).
 
+### *user_namespace*
+
+Manage user namespaces.
+
+**Permission** - 1 unique permission:
+
+*create*
+
+- Create a new user namespace.
+
 ## Capability Object Classes
 
 ### *capability*