include/linux/prctl.h

   1 #ifndef _LINUX_PRCTL_H
   2 #define _LINUX_PRCTL_H
   3
   4 /* Values to pass as first argument to prctl() */
   5
   6 #define PR_SET_PDEATHSIG  1  /* Second arg is a signal */
   7 #define PR_GET_PDEATHSIG  2  /* Second arg is a ptr to return the signal */
   8
   9 /* Get/set current->mm->dumpable */
  10 #define PR_GET_DUMPABLE   3
  11 #define PR_SET_DUMPABLE   4
  12
  13 /* Get/set unaligned access control bits (if meaningful) */
  14 #define PR_GET_UNALIGN    5
  15 #define PR_SET_UNALIGN    6
  16 # define PR_UNALIGN_NOPRINT     1       /* silently fix up unaligned user accesses */
  17 # define PR_UNALIGN_SIGBUS      2       /* generate SIGBUS on unaligned user access */
  18
  19 /* Get/set whether or not to drop capabilities on setuid() away from
  20  * uid 0 (as per security/commoncap.c) */
  21 #define PR_GET_KEEPCAPS   7
  22 #define PR_SET_KEEPCAPS   8
  23
  24 /* Get/set floating-point emulation control bits (if meaningful) */
  25 #define PR_GET_FPEMU  9
  26 #define PR_SET_FPEMU 10
  27 # define PR_FPEMU_NOPRINT       1       /* silently emulate fp operations accesses */
  28 # define PR_FPEMU_SIGFPE        2       /* don't emulate fp operations, send SIGFPE instead */
  29
  30 /* Get/set floating-point exception mode (if meaningful) */
  31 #define PR_GET_FPEXC    11
  32 #define PR_SET_FPEXC    12
  33 # define PR_FP_EXC_SW_ENABLE    0x80    /* Use FPEXC for FP exception enables */
  34 # define PR_FP_EXC_DIV          0x010000        /* floating point divide by zero */
  35 # define PR_FP_EXC_OVF          0x020000        /* floating point overflow */
  36 # define PR_FP_EXC_UND          0x040000        /* floating point underflow */
  37 # define PR_FP_EXC_RES          0x080000        /* floating point inexact result */
  38 # define PR_FP_EXC_INV          0x100000        /* floating point invalid operation */
  39 # define PR_FP_EXC_DISABLED     0       /* FP exceptions disabled */
  40 # define PR_FP_EXC_NONRECOV     1       /* async non-recoverable exc. mode */
  41 # define PR_FP_EXC_ASYNC        2       /* async recoverable exception mode */
  42 # define PR_FP_EXC_PRECISE      3       /* precise exception mode */
  43
  44 /* Get/set whether we use statistical process timing or accurate timestamp
  45  * based process timing */
  46 #define PR_GET_TIMING   13
  47 #define PR_SET_TIMING   14
  48 # define PR_TIMING_STATISTICAL  0       /* Normal, traditional,
  49                                                    statistical process timing */
  50 # define PR_TIMING_TIMESTAMP    1       /* Accurate timestamp based
  51                                                    process timing */
  52
  53 #define PR_SET_NAME    15               /* Set process name */
  54 #define PR_GET_NAME    16               /* Get process name */
  55
  56 /* Get/set process endian */
  57 #define PR_GET_ENDIAN   19
  58 #define PR_SET_ENDIAN   20
  59 # define PR_ENDIAN_BIG          0
  60 # define PR_ENDIAN_LITTLE       1       /* True little endian mode */
  61 # define PR_ENDIAN_PPC_LITTLE   2       /* "PowerPC" pseudo little endian */
  62
  63 /* Get/set process seccomp mode */
  64 #define PR_GET_SECCOMP  21
  65 #define PR_SET_SECCOMP  22
  66
  67 /* Get/set the capability bounding set (as per security/commoncap.c) */
  68 #define PR_CAPBSET_READ 23
  69 #define PR_CAPBSET_DROP 24
  70
  71 /* Get/set the process' ability to use the timestamp counter instruction */
  72 #define PR_GET_TSC 25
  73 #define PR_SET_TSC 26
  74 # define PR_TSC_ENABLE          1       /* allow the use of the timestamp counter */
  75 # define PR_TSC_SIGSEGV         2       /* throw a SIGSEGV instead of reading the TSC */
  76
  77 /* Get/set securebits (as per security/commoncap.c) */
  78 #define PR_GET_SECUREBITS 27
  79 #define PR_SET_SECUREBITS 28
  80
  81 /*
  82  * Get/set the timerslack as used by poll/select/nanosleep
  83  * A value of 0 means "use default"
  84  */
  85 #define PR_SET_TIMERSLACK 29
  86 #define PR_GET_TIMERSLACK 30
  87
  88 #define PR_TASK_PERF_EVENTS_DISABLE             31
  89 #define PR_TASK_PERF_EVENTS_ENABLE              32
  90
  91 /*
  92  * Set early/late kill mode for hwpoison memory corruption.
  93  * This influences when the process gets killed on a memory corruption.
  94  */
  95 #define PR_MCE_KILL     33
  96 # define PR_MCE_KILL_CLEAR   0
  97 # define PR_MCE_KILL_SET     1
  98
  99 # define PR_MCE_KILL_LATE    0
 100 # define PR_MCE_KILL_EARLY   1
 101 # define PR_MCE_KILL_DEFAULT 2
 102
 103 #define PR_MCE_KILL_GET 34
 104
 105 /*
 106  * Tune up process memory map specifics.
 107  */
 108 #define PR_SET_MM               35
 109 # define PR_SET_MM_START_CODE           1
 110 # define PR_SET_MM_END_CODE             2
 111 # define PR_SET_MM_START_DATA           3
 112 # define PR_SET_MM_END_DATA             4
 113 # define PR_SET_MM_START_STACK          5
 114 # define PR_SET_MM_START_BRK            6
 115 # define PR_SET_MM_BRK                  7
 116 # define PR_SET_MM_ARG_START            8
 117 # define PR_SET_MM_ARG_END              9
 118 # define PR_SET_MM_ENV_START            10
 119 # define PR_SET_MM_ENV_END              11
 120 # define PR_SET_MM_AUXV                 12
 121 # define PR_SET_MM_EXE_FILE             13
 122
 123 /*
 124  * Set specific pid that is allowed to ptrace the current task.
 125  * A value of 0 mean "no process".
 126  */
 127 #define PR_SET_PTRACER 0x59616d61
 128 # define PR_SET_PTRACER_ANY ((unsigned long)-1)
 129
 130 #define PR_SET_CHILD_SUBREAPER  36
 131 #define PR_GET_CHILD_SUBREAPER  37
 132
 133 /*
 134  * If no_new_privs is set, then operations that grant new privileges (i.e.
 135  * execve) will either fail or not grant them.  This affects suid/sgid,
 136  * file capabilities, and LSMs.
 137  *
 138  * Operations that merely manipulate or drop existing privileges (setresuid,
 139  * capset, etc.) will still work.  Drop those privileges if you want them gone.
 140  *
 141  * Changing LSM security domain is considered a new privilege.  So, for example,
 142  * asking selinux for a specific new context (e.g. with runcon) will result
 143  * in execve returning -EPERM.
 144  */
 145 #define PR_SET_NO_NEW_PRIVS     38
 146 #define PR_GET_NO_NEW_PRIVS     39
 147
 148 #define PR_GET_TID_ADDRESS      40
 149
 150 #endif /* _LINUX_PRCTL_H */