| /* SPDX-License-Identifier: GPL-2.0-only */ | |
| /* | |
| * AppArmor security module | |
| * | |
| * This file contains AppArmor capability mediation definitions. | |
| * | |
| * Copyright (C) 1998-2008 Novell/SUSE | |
| * Copyright 2009-2013 Canonical Ltd. | |
| */ | |
| #ifndef __AA_CAPABILITY_H | |
| #define __AA_CAPABILITY_H | |
| #include <linux/sched.h> | |
| #include "apparmorfs.h" | |
| struct aa_label; | |
| /* aa_caps - confinement data for capabilities | |
| * @allowed: capabilities mask | |
| * @audit: caps that are to be audited | |
| * @denied: caps that are explicitly denied | |
| * @quiet: caps that should not be audited | |
| * @kill: caps that when requested will result in the task being killed | |
| * @extended: caps that are subject finer grained mediation | |
| */ | |
| struct aa_caps { | |
| kernel_cap_t allow; | |
| kernel_cap_t audit; | |
| kernel_cap_t denied; | |
| kernel_cap_t quiet; | |
| kernel_cap_t kill; | |
| kernel_cap_t extended; | |
| }; | |
| extern struct aa_sfs_entry aa_sfs_entry_caps[]; | |
| kernel_cap_t aa_profile_capget(struct aa_profile *profile); | |
| int aa_capable(const struct cred *subj_cred, struct aa_label *label, | |
| int cap, unsigned int opts); | |
| static inline void aa_free_cap_rules(struct aa_caps *caps) | |
| { | |
| /* NOP */ | |
| } | |
| #endif /* __AA_CAPBILITY_H */ |