Open SCAP Library

process58-capability.h
1 #pragma once
2
3 #ifndef OPENSCAP_OVAL_PROBE_PROCESS58_CAPABILITY_H_
4 #define OPENSCAP_OVAL_PROBE_PROCESS58_CAPABILITY_H_
5
6 /* map based on OVAL and /usr/include/linux/capability.h
7 * not all capabilities from capability.h are allowed in OVAL */
8 #define OVAL_5_8_MAX_CAP_ID 33
9 #define OVAL_5_11_MAX_CAP_ID 38
10 static const struct oscap_string_map CapabilityType[] = {
11 {0, "CAP_CHOWN"},
12 {1, "CAP_DAC_OVERRIDE"},
13 {2, "CAP_DAC_READ_SEARCH"},
14 {3, "CAP_FOWNER"},
15 {4, "CAP_FSETID"},
16 {5, "CAP_KILL"},
17 {6, "CAP_SETGID"},
18 {7, "CAP_SETUID"},
19 {8, "CAP_SETPCAP"},
20 {9, "CAP_LINUX_IMMUTABLE"},
21 {10, "CAP_NET_BIND_SERVICE"},
22 {11, "CAP_NET_BROADCAST"},
23 {12, "CAP_NET_ADMIN"},
24 {13, "CAP_NET_RAW"},
25 {14, "CAP_IPC_LOCK"},
26 {15, "CAP_IPC_OWNER"},
27 {16, "CAP_SYS_MODULE"},
28 {17, "CAP_SYS_RAWIO"},
29 {18, "CAP_SYS_CHROOT"},
30 {19, "CAP_SYS_PTRACE"},
31 {21, "CAP_SYS_ADMIN"},
32 {22, "CAP_SYS_BOOT"},
33 {23, "CAP_SYS_NICE"},
34 {24, "CAP_SYS_RESOURCE"},
35 {25, "CAP_SYS_TIME"},
36 {26, "CAP_SYS_TTY_CONFIG"},
37 {27, "CAP_MKNOD"},
38 {28, "CAP_LEASE"},
39 {29, "CAP_AUDIT_WRITE"},
40 {30, "CAP_AUDIT_CONTROL"},
41 {31, "CAP_SETFCAP"},
42 {32, "CAP_MAC_OVERRIDE"},
43 {33, "CAP_MAC_ADMIN"},
44 /* New capabilities in OVAL 5.11 */
45 {34, "CAP_SYS_PACCT"},
46 {35, "CAP_SYSLOG"},
47 {36, "CAP_WAKE_ALARM"},
48 {37, "CAP_BLOCK_SUSPEND"},
49 {38, "CAP_AUDIT_READ"},
50 {-1, NULL}
51 };
52
53 #endif
oscap_string_map
Define mapping between symbolic constant and its string representation.
Definition: util.h:310