| Elliott Hughes | 180edef | 2023-11-02 00:08:05 +0000 | [diff] [blame] | 1 | /* |
| 2 | * This file is auto-generated. Modifications will be lost. |
| 3 | * |
| 4 | * See https://android.googlesource.com/platform/bionic/+/master/libc/kernel/ |
| 5 | * for more information. |
| 6 | */ |
| Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 7 | #ifndef _UAPI_LINUX_SECUREBITS_H |
| 8 | #define _UAPI_LINUX_SECUREBITS_H |
| 9 | #define issecure_mask(X) (1 << (X)) |
| 10 | #define SECUREBITS_DEFAULT 0x00000000 |
| Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 11 | #define SECURE_NOROOT 0 |
| 12 | #define SECURE_NOROOT_LOCKED 1 |
| 13 | #define SECBIT_NOROOT (issecure_mask(SECURE_NOROOT)) |
| 14 | #define SECBIT_NOROOT_LOCKED (issecure_mask(SECURE_NOROOT_LOCKED)) |
| Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 15 | #define SECURE_NO_SETUID_FIXUP 2 |
| 16 | #define SECURE_NO_SETUID_FIXUP_LOCKED 3 |
| 17 | #define SECBIT_NO_SETUID_FIXUP (issecure_mask(SECURE_NO_SETUID_FIXUP)) |
| Tao Bao | d7db594 | 2015-01-28 10:07:51 -0800 | [diff] [blame] | 18 | #define SECBIT_NO_SETUID_FIXUP_LOCKED (issecure_mask(SECURE_NO_SETUID_FIXUP_LOCKED)) |
| Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 19 | #define SECURE_KEEP_CAPS 4 |
| 20 | #define SECURE_KEEP_CAPS_LOCKED 5 |
| 21 | #define SECBIT_KEEP_CAPS (issecure_mask(SECURE_KEEP_CAPS)) |
| 22 | #define SECBIT_KEEP_CAPS_LOCKED (issecure_mask(SECURE_KEEP_CAPS_LOCKED)) |
| Christopher Ferris | 05d08e9 | 2016-02-04 13:16:38 -0800 | [diff] [blame] | 23 | #define SECURE_NO_CAP_AMBIENT_RAISE 6 |
| 24 | #define SECURE_NO_CAP_AMBIENT_RAISE_LOCKED 7 |
| 25 | #define SECBIT_NO_CAP_AMBIENT_RAISE (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE)) |
| 26 | #define SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE_LOCKED)) |
| Christopher Ferris | a714b62 | 2025-04-07 15:22:55 -0700 | [diff] [blame^] | 27 | #define SECURE_EXEC_RESTRICT_FILE 8 |
| 28 | #define SECURE_EXEC_RESTRICT_FILE_LOCKED 9 |
| 29 | #define SECBIT_EXEC_RESTRICT_FILE (issecure_mask(SECURE_EXEC_RESTRICT_FILE)) |
| 30 | #define SECBIT_EXEC_RESTRICT_FILE_LOCKED (issecure_mask(SECURE_EXEC_RESTRICT_FILE_LOCKED)) |
| 31 | #define SECURE_EXEC_DENY_INTERACTIVE 10 |
| 32 | #define SECURE_EXEC_DENY_INTERACTIVE_LOCKED 11 |
| 33 | #define SECBIT_EXEC_DENY_INTERACTIVE (issecure_mask(SECURE_EXEC_DENY_INTERACTIVE)) |
| 34 | #define SECBIT_EXEC_DENY_INTERACTIVE_LOCKED (issecure_mask(SECURE_EXEC_DENY_INTERACTIVE_LOCKED)) |
| 35 | #define SECURE_ALL_BITS (issecure_mask(SECURE_NOROOT) | issecure_mask(SECURE_NO_SETUID_FIXUP) | issecure_mask(SECURE_KEEP_CAPS) | issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE) | issecure_mask(SECURE_EXEC_RESTRICT_FILE) | issecure_mask(SECURE_EXEC_DENY_INTERACTIVE)) |
| Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 36 | #define SECURE_ALL_LOCKS (SECURE_ALL_BITS << 1) |
| Christopher Ferris | a714b62 | 2025-04-07 15:22:55 -0700 | [diff] [blame^] | 37 | #define SECURE_ALL_UNPRIVILEGED (issecure_mask(SECURE_EXEC_RESTRICT_FILE) | issecure_mask(SECURE_EXEC_DENY_INTERACTIVE)) |
| Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 38 | #endif |