mirror of
https://github.com/SELinuxProject/selinux
synced 2024-12-13 09:34:54 +00:00
7a1e3e1fef
Red Hat is testing ptrace_child in the wild. reserve this policy capability so we don't have conflicts. Signed-off-by: Eric Paris <eparis@redhat.com>
20 lines
567 B
C
20 lines
567 B
C
#ifndef _SEPOL_POLICYDB_POLCAPS_H_
|
|
#define _SEPOL_POLICYDB_POLCAPS_H_
|
|
|
|
/* Policy capabilities */
|
|
enum {
|
|
POLICYDB_CAPABILITY_NETPEER,
|
|
POLICYDB_CAPABILITY_OPENPERM,
|
|
POLICYDB_CAPABILITY_REDHAT1, /* reserved for RH testing of ptrace_child */
|
|
__POLICYDB_CAPABILITY_MAX
|
|
};
|
|
#define POLICYDB_CAPABILITY_MAX (__POLICYDB_CAPABILITY_MAX - 1)
|
|
|
|
/* Convert a capability name to number. */
|
|
extern int sepol_polcap_getnum(const char *name);
|
|
|
|
/* Convert a capability number to name. */
|
|
extern const char *sepol_polcap_getname(int capnum);
|
|
|
|
#endif /* _SEPOL_POLICYDB_POLCAPS_H_ */
|