File tree Expand file tree Collapse file tree 2 files changed +20
-1
lines changed
src/unix/linux_like/linux Expand file tree Collapse file tree 2 files changed +20
-1
lines changed Original file line number Diff line number Diff line change @@ -2776,6 +2776,10 @@ SCTP_STATUS
2776
2776
SCTP_STREAM_RESET_INCOMING
2777
2777
SCTP_STREAM_RESET_OUTGOING
2778
2778
SCTP_UNORDERED
2779
+ SECBIT_EXEC_DENY_INTERACTIVE
2780
+ SECBIT_EXEC_DENY_INTERACTIVE_LOCKED
2781
+ SECBIT_EXEC_RESTRICT_FILE
2782
+ SECBIT_EXEC_RESTRICT_FILE_LOCKED
2779
2783
SECBIT_KEEP_CAPS
2780
2784
SECBIT_KEEP_CAPS_LOCKED
2781
2785
SECBIT_NOROOT
Original file line number Diff line number Diff line change @@ -4750,9 +4750,24 @@ pub const SECBIT_NO_CAP_AMBIENT_RAISE: c_int = issecure_mask(SECURE_NO_CAP_AMBIE
4750
4750
pub const SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED : c_int =
4751
4751
issecure_mask ( SECURE_NO_CAP_AMBIENT_RAISE_LOCKED ) ;
4752
4752
4753
+ const SECURE_EXEC_RESTRICT_FILE : c_int = 8 ;
4754
+ const SECURE_EXEC_RESTRICT_FILE_LOCKED : c_int = 9 ;
4755
+
4756
+ pub const SECBIT_EXEC_RESTRICT_FILE : c_int = issecure_mask ( SECURE_EXEC_RESTRICT_FILE ) ;
4757
+ pub const SECBIT_EXEC_RESTRICT_FILE_LOCKED : c_int =
4758
+ issecure_mask ( SECURE_EXEC_RESTRICT_FILE_LOCKED ) ;
4759
+
4760
+ const SECURE_EXEC_DENY_INTERACTIVE : c_int = 10 ;
4761
+ const SECURE_EXEC_DENY_INTERACTIVE_LOCKED : c_int = 11 ;
4762
+
4763
+ pub const SECBIT_EXEC_DENY_INTERACTIVE : c_int = issecure_mask ( SECURE_EXEC_DENY_INTERACTIVE ) ;
4764
+ pub const SECBIT_EXEC_DENY_INTERACTIVE_LOCKED : c_int =
4765
+ issecure_mask ( SECURE_EXEC_DENY_INTERACTIVE_LOCKED ) ;
4766
+
4753
4767
pub const SECUREBITS_DEFAULT : c_int = 0x00000000 ;
4754
4768
pub const SECURE_ALL_BITS : c_int =
4755
- SECBIT_NOROOT | SECBIT_NO_SETUID_FIXUP | SECBIT_KEEP_CAPS | SECBIT_NO_CAP_AMBIENT_RAISE ;
4769
+ SECBIT_NOROOT | SECBIT_NO_SETUID_FIXUP | SECBIT_KEEP_CAPS | SECBIT_NO_CAP_AMBIENT_RAISE |
4770
+ SECBIT_EXEC_RESTRICT_FILE | SECBIT_EXEC_DENY_INTERACTIVE ;
4756
4771
pub const SECURE_ALL_LOCKS : c_int = SECURE_ALL_BITS << 1 ;
4757
4772
4758
4773
const fn issecure_mask ( x : c_int ) -> c_int {
You can’t perform that action at this time.
0 commit comments