openSUSE patch klog-needs-CAP_SYSLOG

This patch adds the syslog capability to parser/parser_misc.c
and to the sbin.klogd profile.

parser/parser_misc.c

@@ -129,6 +129,9 @@ static int get_table_token(const char *name __unused, struct keyword_table *tabl
 static struct keyword_table capability_table[] = {
 	/* capabilities */
 	#include "cap_names.h"
+#ifndef CAP_SYSLOG
+	{"syslog", 34},
+#endif
 	/* terminate */
 	{NULL, 0}
 };
@@ -866,6 +869,7 @@ static const char *capnames[] = {
 	"audit_control",
 	"setfcap",
 	"mac_override"
+	"syslog",
 };
 
 const char *capability_to_name(unsigned int cap)

profiles/apparmor.d/sbin.klogd

@@ -15,6 +15,7 @@
   #include <abstractions/base>
 
   capability sys_admin,
+  capability syslog,
 
   network inet stream,