1 /*
2  * AppArmor security module
3  *
4  * This file contains AppArmor capability mediation definitions.
5  *
6  * Copyright (C) 1998-2008 Novell/SUSE
7  * Copyright 2009-2010 Canonical Ltd.
8  *
9  * This program is free software; you can redistribute it and/or
10  * modify it under the terms of the GNU General Public License as
11  * published by the Free Software Foundation, version 2 of the
12  * License.
13  */
14 
15 #ifndef __AA_CAPABILITY_H
16 #define __AA_CAPABILITY_H
17 
18 #include <linux/sched.h>
19 
20 #include "apparmorfs.h"
21 
22 struct aa_profile;
23 
24 /* aa_caps - confinement data for capabilities
25  * @allowed: capabilities mask
26  * @audit: caps that are to be audited
27  * @quiet: caps that should not be audited
28  * @kill: caps that when requested will result in the task being killed
29  * @extended: caps that are subject finer grained mediation
30  */
31 struct aa_caps {
32 	kernel_cap_t allow;
33 	kernel_cap_t audit;
34 	kernel_cap_t quiet;
35 	kernel_cap_t kill;
36 	kernel_cap_t extended;
37 };
38 
39 extern struct aa_fs_entry aa_fs_entry_caps[];
40 
41 int aa_capable(struct task_struct *task, struct aa_profile *profile, int cap,
42 	       int audit);
43 
44 static inline void aa_free_cap_rules(struct aa_caps *caps)
45 {
46 	/* NOP */
47 }
48 
49 #endif /* __AA_CAPBILITY_H */
50