xref: /aosp_15_r20/bionic/libc/kernel/uapi/linux/securebits.h (revision 8d67ca893c1523eb926b9080dbe4e2ffd2a27ba1)
1*8d67ca89SAndroid Build Coastguard Worker /*
2*8d67ca89SAndroid Build Coastguard Worker  * This file is auto-generated. Modifications will be lost.
3*8d67ca89SAndroid Build Coastguard Worker  *
4*8d67ca89SAndroid Build Coastguard Worker  * See https://android.googlesource.com/platform/bionic/+/master/libc/kernel/
5*8d67ca89SAndroid Build Coastguard Worker  * for more information.
6*8d67ca89SAndroid Build Coastguard Worker  */
7*8d67ca89SAndroid Build Coastguard Worker #ifndef _UAPI_LINUX_SECUREBITS_H
8*8d67ca89SAndroid Build Coastguard Worker #define _UAPI_LINUX_SECUREBITS_H
9*8d67ca89SAndroid Build Coastguard Worker #define issecure_mask(X) (1 << (X))
10*8d67ca89SAndroid Build Coastguard Worker #define SECUREBITS_DEFAULT 0x00000000
11*8d67ca89SAndroid Build Coastguard Worker #define SECURE_NOROOT 0
12*8d67ca89SAndroid Build Coastguard Worker #define SECURE_NOROOT_LOCKED 1
13*8d67ca89SAndroid Build Coastguard Worker #define SECBIT_NOROOT (issecure_mask(SECURE_NOROOT))
14*8d67ca89SAndroid Build Coastguard Worker #define SECBIT_NOROOT_LOCKED (issecure_mask(SECURE_NOROOT_LOCKED))
15*8d67ca89SAndroid Build Coastguard Worker #define SECURE_NO_SETUID_FIXUP 2
16*8d67ca89SAndroid Build Coastguard Worker #define SECURE_NO_SETUID_FIXUP_LOCKED 3
17*8d67ca89SAndroid Build Coastguard Worker #define SECBIT_NO_SETUID_FIXUP (issecure_mask(SECURE_NO_SETUID_FIXUP))
18*8d67ca89SAndroid Build Coastguard Worker #define SECBIT_NO_SETUID_FIXUP_LOCKED (issecure_mask(SECURE_NO_SETUID_FIXUP_LOCKED))
19*8d67ca89SAndroid Build Coastguard Worker #define SECURE_KEEP_CAPS 4
20*8d67ca89SAndroid Build Coastguard Worker #define SECURE_KEEP_CAPS_LOCKED 5
21*8d67ca89SAndroid Build Coastguard Worker #define SECBIT_KEEP_CAPS (issecure_mask(SECURE_KEEP_CAPS))
22*8d67ca89SAndroid Build Coastguard Worker #define SECBIT_KEEP_CAPS_LOCKED (issecure_mask(SECURE_KEEP_CAPS_LOCKED))
23*8d67ca89SAndroid Build Coastguard Worker #define SECURE_NO_CAP_AMBIENT_RAISE 6
24*8d67ca89SAndroid Build Coastguard Worker #define SECURE_NO_CAP_AMBIENT_RAISE_LOCKED 7
25*8d67ca89SAndroid Build Coastguard Worker #define SECBIT_NO_CAP_AMBIENT_RAISE (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE))
26*8d67ca89SAndroid Build Coastguard Worker #define SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE_LOCKED))
27*8d67ca89SAndroid Build Coastguard Worker #define SECURE_ALL_BITS (issecure_mask(SECURE_NOROOT) | issecure_mask(SECURE_NO_SETUID_FIXUP) | issecure_mask(SECURE_KEEP_CAPS) | issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE))
28*8d67ca89SAndroid Build Coastguard Worker #define SECURE_ALL_LOCKS (SECURE_ALL_BITS << 1)
29*8d67ca89SAndroid Build Coastguard Worker #endif
30