libc/kernel/uapi/linux/securebits.h - platform/bionic - Git at Google


            
            /*

            
             * This file is auto-generated. Modifications will be lost.

            
             *

            
             * See https://android.googlesource.com/platform/bionic/+/master/libc/kernel/

            
             * for more information.

            
             */

            
            #ifndef _UAPI_LINUX_SECUREBITS_H

            
            #define _UAPI_LINUX_SECUREBITS_H

            
            #define issecure_mask(X) (1 << (X))

            
            #define SECUREBITS_DEFAULT 0x00000000

            
            #define SECURE_NOROOT 0

            
            #define SECURE_NOROOT_LOCKED 1

            
            #define SECBIT_NOROOT (issecure_mask(SECURE_NOROOT))

            
            #define SECBIT_NOROOT_LOCKED (issecure_mask(SECURE_NOROOT_LOCKED))

            
            #define SECURE_NO_SETUID_FIXUP 2

            
            #define SECURE_NO_SETUID_FIXUP_LOCKED 3

            
            #define SECBIT_NO_SETUID_FIXUP (issecure_mask(SECURE_NO_SETUID_FIXUP))

            
            #define SECBIT_NO_SETUID_FIXUP_LOCKED (issecure_mask(SECURE_NO_SETUID_FIXUP_LOCKED))

            
            #define SECURE_KEEP_CAPS 4

            
            #define SECURE_KEEP_CAPS_LOCKED 5

            
            #define SECBIT_KEEP_CAPS (issecure_mask(SECURE_KEEP_CAPS))

            
            #define SECBIT_KEEP_CAPS_LOCKED (issecure_mask(SECURE_KEEP_CAPS_LOCKED))

            
            #define SECURE_NO_CAP_AMBIENT_RAISE 6

            
            #define SECURE_NO_CAP_AMBIENT_RAISE_LOCKED 7

            
            #define SECBIT_NO_CAP_AMBIENT_RAISE (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE))

            
            #define SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE_LOCKED))

            
            #define SECURE_EXEC_RESTRICT_FILE 8

            
            #define SECURE_EXEC_RESTRICT_FILE_LOCKED 9

            
            #define SECBIT_EXEC_RESTRICT_FILE (issecure_mask(SECURE_EXEC_RESTRICT_FILE))

            
            #define SECBIT_EXEC_RESTRICT_FILE_LOCKED (issecure_mask(SECURE_EXEC_RESTRICT_FILE_LOCKED))

            
            #define SECURE_EXEC_DENY_INTERACTIVE 10

            
            #define SECURE_EXEC_DENY_INTERACTIVE_LOCKED 11

            
            #define SECBIT_EXEC_DENY_INTERACTIVE (issecure_mask(SECURE_EXEC_DENY_INTERACTIVE))

            
            #define SECBIT_EXEC_DENY_INTERACTIVE_LOCKED (issecure_mask(SECURE_EXEC_DENY_INTERACTIVE_LOCKED))

            
            #define SECURE_ALL_BITS (issecure_mask(SECURE_NOROOT) | issecure_mask(SECURE_NO_SETUID_FIXUP) | issecure_mask(SECURE_KEEP_CAPS) | issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE) | issecure_mask(SECURE_EXEC_RESTRICT_FILE) | issecure_mask(SECURE_EXEC_DENY_INTERACTIVE))

            
            #define SECURE_ALL_LOCKS (SECURE_ALL_BITS << 1)

            
            #define SECURE_ALL_UNPRIVILEGED (issecure_mask(SECURE_EXEC_RESTRICT_FILE) | issecure_mask(SECURE_EXEC_DENY_INTERACTIVE))

            
            #endif
	/*
	* This file is auto-generated. Modifications will be lost.
	*
	* See https://android.googlesource.com/platform/bionic/+/master/libc/kernel/
	* for more information.
	*/
	#ifndef _UAPI_LINUX_SECUREBITS_H
	#define _UAPI_LINUX_SECUREBITS_H
	#define issecure_mask(X) (1 << (X))
	#define SECUREBITS_DEFAULT 0x00000000
	#define SECURE_NOROOT 0
	#define SECURE_NOROOT_LOCKED 1
	#define SECBIT_NOROOT (issecure_mask(SECURE_NOROOT))
	#define SECBIT_NOROOT_LOCKED (issecure_mask(SECURE_NOROOT_LOCKED))
	#define SECURE_NO_SETUID_FIXUP 2
	#define SECURE_NO_SETUID_FIXUP_LOCKED 3
	#define SECBIT_NO_SETUID_FIXUP (issecure_mask(SECURE_NO_SETUID_FIXUP))
	#define SECBIT_NO_SETUID_FIXUP_LOCKED (issecure_mask(SECURE_NO_SETUID_FIXUP_LOCKED))
	#define SECURE_KEEP_CAPS 4
	#define SECURE_KEEP_CAPS_LOCKED 5
	#define SECBIT_KEEP_CAPS (issecure_mask(SECURE_KEEP_CAPS))
	#define SECBIT_KEEP_CAPS_LOCKED (issecure_mask(SECURE_KEEP_CAPS_LOCKED))
	#define SECURE_NO_CAP_AMBIENT_RAISE 6
	#define SECURE_NO_CAP_AMBIENT_RAISE_LOCKED 7
	#define SECBIT_NO_CAP_AMBIENT_RAISE (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE))
	#define SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE_LOCKED))
	#define SECURE_EXEC_RESTRICT_FILE 8
	#define SECURE_EXEC_RESTRICT_FILE_LOCKED 9
	#define SECBIT_EXEC_RESTRICT_FILE (issecure_mask(SECURE_EXEC_RESTRICT_FILE))
	#define SECBIT_EXEC_RESTRICT_FILE_LOCKED (issecure_mask(SECURE_EXEC_RESTRICT_FILE_LOCKED))
	#define SECURE_EXEC_DENY_INTERACTIVE 10
	#define SECURE_EXEC_DENY_INTERACTIVE_LOCKED 11
	#define SECBIT_EXEC_DENY_INTERACTIVE (issecure_mask(SECURE_EXEC_DENY_INTERACTIVE))
	#define SECBIT_EXEC_DENY_INTERACTIVE_LOCKED (issecure_mask(SECURE_EXEC_DENY_INTERACTIVE_LOCKED))
	#define SECURE_ALL_BITS (issecure_mask(SECURE_NOROOT) \| issecure_mask(SECURE_NO_SETUID_FIXUP) \| issecure_mask(SECURE_KEEP_CAPS) \| issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE) \| issecure_mask(SECURE_EXEC_RESTRICT_FILE) \| issecure_mask(SECURE_EXEC_DENY_INTERACTIVE))
	#define SECURE_ALL_LOCKS (SECURE_ALL_BITS << 1)
	#define SECURE_ALL_UNPRIVILEGED (issecure_mask(SECURE_EXEC_RESTRICT_FILE) \| issecure_mask(SECURE_EXEC_DENY_INTERACTIVE))
	#endif