| commit | 943b011b5e53624eb9cab4e96c1985326e077cdd | [log] [tgz] |
|---|---|---|
| author | Andrew G. Morgan <morgan@kernel.org> | Mon Feb 17 14:00:46 2020 -0800 |
| committer | Andrew G. Morgan <morgan@kernel.org> | Sun Feb 23 16:00:02 2020 -0800 |
| tree | 42342c209e84ac378aaf6dc15af5701966baab1c | |
| parent | 51ed0ec9b78ef321e5feba3780aefbc4d0246449 [diff] |
A convenient IAB abstraction for inherited capability vectors. Linux supports three flavors of inheritable capability vectors: - the I (inheritable set) of cap_t - the A (ambient) alternative to file capabilities - the B (bounding) vector. The cap_iab_t collects these together into one object. I exactly equals that of cap_t, A is what you would expect and B is "blocked" bits which are ~cap_bound -- ie., 0 = nothing blocked. Signed-off-by: Andrew G. Morgan <morgan@kernel.org>