1 /* 2 * This file is auto-generated. Modifications will be lost. 3 * 4 * See https://android.googlesource.com/platform/bionic/+/master/libc/kernel/ 5 * for more information. 6 */ 7 #ifndef _UAPI_LINUX_SECUREBITS_H 8 #define _UAPI_LINUX_SECUREBITS_H 9 #define issecure_mask(X) (1 << (X)) 10 #define SECUREBITS_DEFAULT 0x00000000 11 #define SECURE_NOROOT 0 12 #define SECURE_NOROOT_LOCKED 1 13 #define SECBIT_NOROOT (issecure_mask(SECURE_NOROOT)) 14 #define SECBIT_NOROOT_LOCKED (issecure_mask(SECURE_NOROOT_LOCKED)) 15 #define SECURE_NO_SETUID_FIXUP 2 16 #define SECURE_NO_SETUID_FIXUP_LOCKED 3 17 #define SECBIT_NO_SETUID_FIXUP (issecure_mask(SECURE_NO_SETUID_FIXUP)) 18 #define SECBIT_NO_SETUID_FIXUP_LOCKED (issecure_mask(SECURE_NO_SETUID_FIXUP_LOCKED)) 19 #define SECURE_KEEP_CAPS 4 20 #define SECURE_KEEP_CAPS_LOCKED 5 21 #define SECBIT_KEEP_CAPS (issecure_mask(SECURE_KEEP_CAPS)) 22 #define SECBIT_KEEP_CAPS_LOCKED (issecure_mask(SECURE_KEEP_CAPS_LOCKED)) 23 #define SECURE_NO_CAP_AMBIENT_RAISE 6 24 #define SECURE_NO_CAP_AMBIENT_RAISE_LOCKED 7 25 #define SECBIT_NO_CAP_AMBIENT_RAISE (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE)) 26 #define SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE_LOCKED)) 27 #define SECURE_ALL_BITS (issecure_mask(SECURE_NOROOT) | issecure_mask(SECURE_NO_SETUID_FIXUP) | issecure_mask(SECURE_KEEP_CAPS) | issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE)) 28 #define SECURE_ALL_LOCKS (SECURE_ALL_BITS << 1) 29 #endif 30