Open SCAP Library: process58-capability.h Source File

00001 /* map based on OVAL and /usr/include/linux/capability.h
00002  * not all capabilities from capability.h are allowed in OVAL */
00003 #define OVAL_5_8_MAX_CAP_ID 33
00004 #define OVAL_5_11_MAX_CAP_ID 38
00005 static const struct oscap_string_map CapabilityType[] = {
00006 {0, "CAP_CHOWN"},
00007 {1, "CAP_DAC_OVERRIDE"},
00008 {2, "CAP_DAC_READ_SEARCH"},
00009 {3, "CAP_FOWNER"},
00010 {4, "CAP_FSETID"},
00011 {5, "CAP_KILL"},
00012 {6, "CAP_SETGID"},
00013 {7, "CAP_SETUID"},
00014 {8, "CAP_SETPCAP"},
00015 {9, "CAP_LINUX_IMMUTABLE"},
00016 {10, "CAP_NET_BIND_SERVICE"},
00017 {11, "CAP_NET_BROADCAST"},
00018 {12, "CAP_NET_ADMIN"},
00019 {13, "CAP_NET_RAW"},
00020 {14, "CAP_IPC_LOCK"},
00021 {15, "CAP_IPC_OWNER"},
00022 {16, "CAP_SYS_MODULE"},
00023 {17, "CAP_SYS_RAWIO"},
00024 {18, "CAP_SYS_CHROOT"},
00025 {19, "CAP_SYS_PTRACE"},
00026 {21, "CAP_SYS_ADMIN"},
00027 {22, "CAP_SYS_BOOT"},
00028 {23, "CAP_SYS_NICE"},
00029 {24, "CAP_SYS_RESOURCE"},
00030 {25, "CAP_SYS_TIME"},
00031 {26, "CAP_SYS_TTY_CONFIG"},
00032 {27, "CAP_MKNOD"},
00033 {28, "CAP_LEASE"},
00034 {29, "CAP_AUDIT_WRITE"},
00035 {30, "CAP_AUDIT_CONTROL"},
00036 {31, "CAP_SETFCAP"},
00037 {32, "CAP_MAC_OVERRIDE"},
00038 {33, "CAP_MAC_ADMIN"},
00039 /* New capabilities in OVAL 5.11 */
00040 {34, "CAP_SYS_PACCT"},
00041 {35, "CAP_SYSLOG"},
00042 {36, "CAP_WAKE_ALARM"},
00043 {37, "CAP_BLOCK_SUSPEND"},
00044 {38, "CAP_AUDIT_READ"},
00045 {-1, NULL}
00046 };