1 /*
2  * AppArmor security module
3  *
4  * This file contains AppArmor capability mediation definitions.
5  *
6  * Copyright (C) 1998-2008 Novell/SUSE
7  * Copyright 2009-2013 Canonical Ltd.
8  *
9  * This program is free software; you can redistribute it and/or
10  * modify it under the terms of the GNU General Public License as
11  * published by the Free Software Foundation, version 2 of the
12  * License.
13  */
14 
15 #ifndef __AA_CAPABILITY_H
16 #define __AA_CAPABILITY_H
17 
18 #include <linux/sched.h>
19 
20 #include "apparmorfs.h"
21 
22 struct aa_label;
23 
24 /* aa_caps - confinement data for capabilities
25  * @allowed: capabilities mask
26  * @audit: caps that are to be audited
27  * @denied: caps that are explicitly denied
28  * @quiet: caps that should not be audited
29  * @kill: caps that when requested will result in the task being killed
30  * @extended: caps that are subject finer grained mediation
31  */
32 struct aa_caps {
33 	kernel_cap_t allow;
34 	kernel_cap_t audit;
35 	kernel_cap_t denied;
36 	kernel_cap_t quiet;
37 	kernel_cap_t kill;
38 	kernel_cap_t extended;
39 };
40 
41 extern struct aa_sfs_entry aa_sfs_entry_caps[];
42 
43 int aa_capable(struct aa_label *label, int cap, unsigned int opts);
44 
45 static inline void aa_free_cap_rules(struct aa_caps *caps)
46 {
47 	/* NOP */
48 }
49 
50 #endif /* __AA_CAPBILITY_H */
51