1 /**************************************************************************** 2 **************************************************************************** 3 *** 4 *** This header was automatically generated from a Linux kernel header 5 *** of the same name, to make information necessary for userspace to 6 *** call into the kernel available to libc. It contains only constants, 7 *** structures, and macros generated from the original header, and thus, 8 *** contains no copyrightable information. 9 *** 10 *** To edit the content of this header, modify the corresponding 11 *** source file (e.g. under external/kernel-headers/original/) then 12 *** run bionic/libc/kernel/tools/update_all.py 13 *** 14 *** Any manual change here will be lost the next time this script will 15 *** be run. You've been warned! 16 *** 17 **************************************************************************** 18 ****************************************************************************/ 19 #ifndef _UAPI_LINUX_SECUREBITS_H 20 #define _UAPI_LINUX_SECUREBITS_H 21 #define issecure_mask(X) (1 << (X)) 22 #define SECUREBITS_DEFAULT 0x00000000 23 #define SECURE_NOROOT 0 24 #define SECURE_NOROOT_LOCKED 1 25 #define SECBIT_NOROOT (issecure_mask(SECURE_NOROOT)) 26 #define SECBIT_NOROOT_LOCKED (issecure_mask(SECURE_NOROOT_LOCKED)) 27 #define SECURE_NO_SETUID_FIXUP 2 28 #define SECURE_NO_SETUID_FIXUP_LOCKED 3 29 #define SECBIT_NO_SETUID_FIXUP (issecure_mask(SECURE_NO_SETUID_FIXUP)) 30 #define SECBIT_NO_SETUID_FIXUP_LOCKED (issecure_mask(SECURE_NO_SETUID_FIXUP_LOCKED)) 31 #define SECURE_KEEP_CAPS 4 32 #define SECURE_KEEP_CAPS_LOCKED 5 33 #define SECBIT_KEEP_CAPS (issecure_mask(SECURE_KEEP_CAPS)) 34 #define SECBIT_KEEP_CAPS_LOCKED (issecure_mask(SECURE_KEEP_CAPS_LOCKED)) 35 #define SECURE_NO_CAP_AMBIENT_RAISE 6 36 #define SECURE_NO_CAP_AMBIENT_RAISE_LOCKED 7 37 #define SECBIT_NO_CAP_AMBIENT_RAISE (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE)) 38 #define SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE_LOCKED)) 39 #define SECURE_ALL_BITS (issecure_mask(SECURE_NOROOT) | issecure_mask(SECURE_NO_SETUID_FIXUP) | issecure_mask(SECURE_KEEP_CAPS) | issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE)) 40 #define SECURE_ALL_LOCKS (SECURE_ALL_BITS << 1) 41 #endif 42