tree 42342c209e84ac378aaf6dc15af5701966baab1c
parent 51ed0ec9b78ef321e5feba3780aefbc4d0246449
author Andrew G. Morgan <morgan@kernel.org> 1581976846 -0800
committer Andrew G. Morgan <morgan@kernel.org> 1582502402 -0800

A convenient IAB abstraction for inherited capability vectors.

Linux supports three flavors of inheritable capability vectors:

  - the I (inheritable set) of cap_t
  - the A (ambient) alternative to file capabilities
  - the B (bounding) vector.

The cap_iab_t collects these together into one object. I exactly equals
that of cap_t, A is what you would expect and B is "blocked" bits which
are ~cap_bound -- ie., 0 = nothing blocked.

Signed-off-by: Andrew G. Morgan <morgan@kernel.org>