process58-capability.h

#pragma once

#ifndef OPENSCAP_OVAL_PROBE_PROCESS58_CAPABILITY_H_
#define OPENSCAP_OVAL_PROBE_PROCESS58_CAPABILITY_H_

/* map based on OVAL and /usr/include/linux/capability.h
 * not all capabilities from capability.h are allowed in OVAL */
#define OVAL_5_8_MAX_CAP_ID 33
#define OVAL_5_11_MAX_CAP_ID 38
static const struct oscap_string_map CapabilityType[] = {
{0, "CAP_CHOWN"},
{1, "CAP_DAC_OVERRIDE"},
{2, "CAP_DAC_READ_SEARCH"},
{3, "CAP_FOWNER"},
{4, "CAP_FSETID"},
{5, "CAP_KILL"},
{6, "CAP_SETGID"},
{7, "CAP_SETUID"},
{8, "CAP_SETPCAP"},
{9, "CAP_LINUX_IMMUTABLE"},
{10, "CAP_NET_BIND_SERVICE"},
{11, "CAP_NET_BROADCAST"},
{12, "CAP_NET_ADMIN"},
{13, "CAP_NET_RAW"},
{14, "CAP_IPC_LOCK"},
{15, "CAP_IPC_OWNER"},
{16, "CAP_SYS_MODULE"},
{17, "CAP_SYS_RAWIO"},
{18, "CAP_SYS_CHROOT"},
{19, "CAP_SYS_PTRACE"},
{21, "CAP_SYS_ADMIN"},
{22, "CAP_SYS_BOOT"},
{23, "CAP_SYS_NICE"},
{24, "CAP_SYS_RESOURCE"},
{25, "CAP_SYS_TIME"},
{26, "CAP_SYS_TTY_CONFIG"},
{27, "CAP_MKNOD"},
{28, "CAP_LEASE"},
{29, "CAP_AUDIT_WRITE"},
{30, "CAP_AUDIT_CONTROL"},
{31, "CAP_SETFCAP"},
{32, "CAP_MAC_OVERRIDE"},
{33, "CAP_MAC_ADMIN"},
/* New capabilities in OVAL 5.11 */
{34, "CAP_SYS_PACCT"},
{35, "CAP_SYSLOG"},
{36, "CAP_WAKE_ALARM"},
{37, "CAP_BLOCK_SUSPEND"},
{38, "CAP_AUDIT_READ"},
{-1, NULL}
};

#endif