Home | History | Annotate | Download | only in linux 
      1 /****************************************************************************
      2  ****************************************************************************
      3  ***
      4  ***   This header was automatically generated from a Linux kernel header
      5  ***   of the same name, to make information necessary for userspace to
      6  ***   call into the kernel available to libc.  It contains only constants,
      7  ***   structures, and macros generated from the original header, and thus,
      8  ***   contains no copyrightable information.
      9  ***
     10  ***   To edit the content of this header, modify the corresponding
     11  ***   source file (e.g. under external/kernel-headers/original/) then
     12  ***   run bionic/libc/kernel/tools/update_all.py
     13  ***
     14  ***   Any manual change here will be lost the next time this script will
     15  ***   be run. You've been warned!
     16  ***
     17  ****************************************************************************
     18  ****************************************************************************/
     19 #ifndef _UAPI_LINUX_SECUREBITS_H
     20 #define _UAPI_LINUX_SECUREBITS_H
     21 #define issecure_mask(X) (1 << (X))
     22 #define SECUREBITS_DEFAULT 0x00000000
     23 #define SECURE_NOROOT 0
     24 #define SECURE_NOROOT_LOCKED 1
     25 #define SECBIT_NOROOT (issecure_mask(SECURE_NOROOT))
     26 #define SECBIT_NOROOT_LOCKED (issecure_mask(SECURE_NOROOT_LOCKED))
     27 #define SECURE_NO_SETUID_FIXUP 2
     28 #define SECURE_NO_SETUID_FIXUP_LOCKED 3
     29 #define SECBIT_NO_SETUID_FIXUP (issecure_mask(SECURE_NO_SETUID_FIXUP))
     30 #define SECBIT_NO_SETUID_FIXUP_LOCKED (issecure_mask(SECURE_NO_SETUID_FIXUP_LOCKED))
     31 #define SECURE_KEEP_CAPS 4
     32 #define SECURE_KEEP_CAPS_LOCKED 5
     33 #define SECBIT_KEEP_CAPS (issecure_mask(SECURE_KEEP_CAPS))
     34 #define SECBIT_KEEP_CAPS_LOCKED (issecure_mask(SECURE_KEEP_CAPS_LOCKED))
     35 #define SECURE_NO_CAP_AMBIENT_RAISE 6
     36 #define SECURE_NO_CAP_AMBIENT_RAISE_LOCKED 7
     37 #define SECBIT_NO_CAP_AMBIENT_RAISE (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE))
     38 #define SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE_LOCKED))
     39 #define SECURE_ALL_BITS (issecure_mask(SECURE_NOROOT) | issecure_mask(SECURE_NO_SETUID_FIXUP) | issecure_mask(SECURE_KEEP_CAPS) | issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE))
     40 #define SECURE_ALL_LOCKS (SECURE_ALL_BITS << 1)
     41 #endif
     42