1// Copyright 2015 The Chromium Authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5#ifndef SANDBOX_LINUX_SYSTEM_HEADERS_LINUX_CAPABILITY_H_
6#define SANDBOX_LINUX_SYSTEM_HEADERS_LINUX_CAPABILITY_H_
7
8#include <stdint.h>
9
10// The following macros are taken from linux/capability.h.
11// We only support capability version 3, which was introduced in Linux 2.6.26.
12#ifndef _LINUX_CAPABILITY_VERSION_3
13#define _LINUX_CAPABILITY_VERSION_3 0x20080522
14#endif
15#ifndef _LINUX_CAPABILITY_U32S_3
16#define _LINUX_CAPABILITY_U32S_3 2
17#endif
18#ifndef CAP_TO_INDEX
19#define CAP_TO_INDEX(x) ((x) >> 5)  // 1 << 5 == bits in __u32
20#endif
21#ifndef CAP_TO_MASK
22#define CAP_TO_MASK(x) (1 << ((x) & 31))  // mask for indexed __u32
23#endif
24#ifndef CAP_SYS_CHROOT
25#define CAP_SYS_CHROOT 18
26#endif
27#ifndef CAP_SYS_ADMIN
28#define CAP_SYS_ADMIN 21
29#endif
30
31struct cap_hdr {
32  uint32_t version;
33  int pid;
34};
35
36struct cap_data {
37  uint32_t effective;
38  uint32_t permitted;
39  uint32_t inheritable;
40};
41
42#endif  // SANDBOX_LINUX_SYSTEM_HEADERS_LINUX_CAPABILITY_H_
43