Flags for secpolev_get_ability_info()

Definitions:

#define SECPOLEV_ABILITY_STATIC 0x1u

Ability is a static ability.

#define SECPOLEV_ABILITY_RANGED 0x2u

Ability supports ranges.

It's assumed custom abilities don't support ranges. In addition, certain static abilities are treated as if they don't support ranges in cases where the range is not meaningful (e.g., prot_exec).

#define SECPOLEV_ABILITY_ROOT 0x4u

The root set of abilities was tested.

Page updated: