src/basic/missing_securebits.h

   1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
   2 #pragma once
   3
   4 #include <linux/securebits.h>
   5
   6 /* 746bf6d64275be0c65b0631d8a72b16f1454cfa1 (4.3) */
   7 #ifndef SECURE_NO_CAP_AMBIENT_RAISE
   8 #define SECURE_NO_CAP_AMBIENT_RAISE        6
   9 #define SECURE_NO_CAP_AMBIENT_RAISE_LOCKED 7  /* make bit-6 immutable */
  10 #define SECBIT_NO_CAP_AMBIENT_RAISE        (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE))
  11 #define SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE_LOCKED))
  12
  13 #undef  SECURE_ALL_BITS
  14 #define SECURE_ALL_BITS (issecure_mask(SECURE_NOROOT) |                 \
  15                          issecure_mask(SECURE_NO_SETUID_FIXUP) |        \
  16                          issecure_mask(SECURE_KEEP_CAPS) |              \
  17                          issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE))
  18 #endif