bend-osdev-caps

Releases (1)

• 0.1.0.0 indexed

Definitions (282)

adjust.bend

• def CapAdjust.set_piethe new sets; ambient capabilities no longer both permitted and inheritable are lowered (capabilities(7), "Ambient")
• def CapAdjust.capset.done
• def CapAdjust.capset.r4without CAP_SETPCAP in the effective set: the new inheritable set must be within the old inheritable and permitted sets
• def CapAdjust.capset.r3the new inheritable set must be within the old inheritable and bounding sets
• def CapAdjust.capset.r2the new effective set must be within the new permitted set
• def CapAdjust.capset.r1the new permitted set must be within the old one
• def Caps.capsetcapset(2) with new effective e, permitted p and inheritable i.
• def CapAdjust.bset_drop.go
• def Caps.bset_dropdrop capability x from the bounding set: CapsInvalidCap (EINVAL) if the kernel does not support x, CapsNoSetpcap (EPERM) without CAP_SETPCAP in the effective set
• def CapAdjust.bset_read.go
• def Caps.bset_readwhether x is in the bounding set
• def CapAdjust.ambient.allowed
• def CapAdjust.ambient_raise.go
• def Caps.ambient_raisePR_CAP_AMBIENT_RAISE: x must be both permitted and inheritable (CapsAmbientNotAllowed), and SECBIT_NO_CAP_AMBIENT_RAISE clear (CapsAmbientRaiseLocked)
• def CapAdjust.ambient_lower.go
• def Caps.ambient_lowerPR_CAP_AMBIENT_LOWER
• def CapAdjust.ambient_is_set.go
• def Caps.ambient_is_setPR_CAP_AMBIENT_IS_SET
• def Caps.ambient_clear_allPR_CAP_AMBIENT_CLEAR_ALL

caps.bend

• def Cap.chown
• def Cap.dac_override
• def Cap.dac_read_search
• def Cap.fowner
• def Cap.fsetid
• def Cap.kill
• def Cap.setgid
• def Cap.setuid
• def Cap.setpcap
• def Cap.linux_immutable
• def Cap.net_bind_service
• def Cap.net_broadcast
• def Cap.net_admin
• def Cap.net_raw
• def Cap.ipc_lock
• def Cap.ipc_owner
• def Cap.sys_module
• def Cap.sys_rawio
• def Cap.sys_chroot
• def Cap.sys_ptrace
• def Cap.sys_pacct
• def Cap.sys_admin
• def Cap.sys_boot
• def Cap.sys_nice
• def Cap.sys_resource
• def Cap.sys_time
• def Cap.sys_tty_config
• def Cap.mknod
• def Cap.lease
• def Cap.audit_write
• def Cap.audit_control
• def Cap.setfcap
• def Cap.mac_override
• def Cap.mac_admin
• def Cap.syslog
• def Cap.wake_alarm
• def Cap.block_suspend
• def Cap.audit_read
• def Cap.perfmon
• def Cap.bpf
• def Cap.checkpoint_restore
• def Cap.count
• def Cap.names
• def Cap.validwhether k names a capability (0 to 40)
• def Cap.name.go
• def Cap.namethe name of capability k, such as "CAP_CHOWN"
• def Cap.of_name.hit
• def Cap.of_name.go
• def Cap.of_namethe number of the capability named s
• def CapBits.allthe set of every capability below n
• def CapBits.sub.bitone bit of a subset test: a bit in a must be in b; r is the rest
• def CapBits.subsetevery capability in a is in b
• def CapBits.singlethe set holding capability k alone (empty if k >= n)
• def CapBits.haswhether capability k is in s
• def CapBits.to_listthe capabilities in s, in increasing order, numbered from k

PROOF.bend

• def ex.root_p
• def ex.root_e
• def ex.nonroot_p
• def ex.nonroot_e
• def ex.result
• def cs.p.donecapset: each rule in turn
• def cs.p.r4
• def cs.p.r3
• def cs.p.r2
• def cs.p.r1
• def cs.b.done
• def cs.b.r4
• def cs.b.r3
• def cs.b.r2
• def cs.b.r1
• def cs.v.done
• def cs.v.r4
• def cs.v.r3
• def cs.v.r2
• def cs.v.r1
• def bd.subprctl
• def bd.rest
• def ar.valid
• def al.valid
• def ar.rest
• def al.rest