FM / linux

/usr/include/linux

Name	Size	Mode	Actions
byteorder/	-	0755	rm
can/	-	0755	rm
dvb/	-	0755	rm
hdlc/	-	0755	rm
isdn/	-	0755	rm
netfilter/	-	0755	rm
netfilter_arp/	-	0755	rm
netfilter_bridge/	-	0755	rm
netfilter_ipv4/	-	0755	rm
netfilter_ipv6/	-	0755	rm
nfsd/	-	0755	rm
raid/	-	0755	rm
spi/	-	0755	rm
sunrpc/	-	0755	rm
tc_act/	-	0755	rm
tc_ematch/	-	0755	rm
usb/	-	0755	rm
wimax/	-	0755	rm
a.out.h	7319	0644	edit dl rm
acct.h	3490	0644	edit dl rm
adb.h	1077	0644	edit dl rm
adfs_fs.h	856	0644	edit dl rm
affs_hardblocks.h	1481	0644	edit dl rm
agpgart.h	3925	0644	edit dl rm
aio_abi.h	3112	0644	edit dl rm
apm_bios.h	3544	0644	edit dl rm
arcfb.h	150	0644	edit dl rm
atalk.h	927	0644	edit dl rm
atm.h	7806	0644	edit dl rm
atmapi.h	889	0644	edit dl rm
atmarp.h	1233	0644	edit dl rm
atmbr2684.h	3208	0644	edit dl rm
atmclip.h	513	0644	edit dl rm
atmdev.h	7593	0644	edit dl rm
atmioc.h	1583	0644	edit dl rm
atmlec.h	2561	0644	edit dl rm
atmmpc.h	4163	0644	edit dl rm
atmppp.h	576	0644	edit dl rm
atmsap.h	4907	0644	edit dl rm
atmsvc.h	1790	0644	edit dl rm
atm_eni.h	585	0644	edit dl rm
atm_he.h	343	0644	edit dl rm
atm_idt77105.h	892	0644	edit dl rm
atm_nicstar.h	1215	0644	edit dl rm
atm_tcp.h	1537	0644	edit dl rm
atm_zatm.h	1606	0644	edit dl rm
audit.h	15880	0644	edit dl rm
auto_fs.h	2346	0644	edit dl rm
auto_fs4.h	4131	0644	edit dl rm
auxvec.h	1384	0644	edit dl rm
ax25.h	2752	0644	edit dl rm
b1lli.h	1654	0644	edit dl rm
baycom.h	820	0644	edit dl rm
bfs_fs.h	1830	0644	edit dl rm
binfmts.h	565	0644	edit dl rm
blkpg.h	1598	0644	edit dl rm
blktrace_api.h	4473	0644	edit dl rm
blk_types.h	7106	0644	edit dl rm
bpqether.h	952	0644	edit dl rm
bsg.h	2385	0644	edit dl rm
can.h	3326	0644	edit dl rm
capability.h	10589	0644	edit dl rm
capi.h	3057	0644	edit dl rm
cciss_ioctl.h	5824	0644	edit dl rm
cdk.h	12770	0644	edit dl rm
cdrom.h	28129	0644	edit dl rm
cgroupstats.h	2155	0644	edit dl rm
chio.h	5280	0644	edit dl rm
cm4000_cs.h	1718	0644	edit dl rm
cn_proc.h	2715	0644	edit dl rm
coda.h	17487	0644	edit dl rm
coda_psdev.h	679	0644	edit dl rm
coff.h	12413	0644	edit dl rm
comstats.h	3120	0644	edit dl rm
connector.h	2129	0644	edit dl rm
const.h	682	0644	edit dl rm
cramfs_fs.h	2930	0644	edit dl rm
cuda.h	769	0644	edit dl rm
cyclades.h	17045	0644	edit dl rm
cycx_cfm.h	2926	0644	edit dl rm
dcbnl.h	22120	0644	edit dl rm
dccp.h	5800	0644	edit dl rm
dlm.h	2529	0644	edit dl rm
dlmconstants.h	5013	0644	edit dl rm
dlm_device.h	2480	0644	edit dl rm
dlm_netlink.h	1064	0644	edit dl rm
dlm_plock.h	806	0644	edit dl rm
dm-ioctl.h	10668	0644	edit dl rm
dm-log-userspace.h	15173	0644	edit dl rm
dn.h	4527	0644	edit dl rm
dqblk_xfs.h	6952	0644	edit dl rm
edd.h	5544	0644	edit dl rm
efs_fs_sb.h	2164	0644	edit dl rm
elf-em.h	1834	0644	edit dl rm
elf-fdpic.h	2557	0644	edit dl rm
elf.h	11236	0644	edit dl rm
elfcore.h	2932	0644	edit dl rm
errno.h	79	0644	edit dl rm
errqueue.h	443	0644	edit dl rm
ethtool.h	34166	0644	edit dl rm
eventpoll.h	1353	0644	edit dl rm
ext2_fs.h	18802	0644	edit dl rm
fadvise.h	855	0644	edit dl rm
falloc.h	293	0644	edit dl rm
fb.h	16016	0644	edit dl rm
fcntl.h	1607	0644	edit dl rm
fd.h	11563	0644	edit dl rm
fdreg.h	5355	0644	edit dl rm
fib_rules.h	1459	0644	edit dl rm
fiemap.h	2548	0644	edit dl rm
filter.h	3534	0644	edit dl rm
firewire-cdev.h	25053	0644	edit dl rm
firewire-constants.h	1975	0644	edit dl rm
flat.h	2085	0644	edit dl rm
fs.h	18910	0644	edit dl rm
fuse.h	11441	0644	edit dl rm
futex.h	4909	0644	edit dl rm
gameport.h	816	0644	edit dl rm
generic_serial.h	895	0644	edit dl rm
genetlink.h	1683	0644	edit dl rm
gen_stats.h	1304	0644	edit dl rm
gfs2_ondisk.h	11814	0644	edit dl rm
gigaset_dev.h	981	0644	edit dl rm
hayesesp.h	230	0644	edit dl rm
hdlc.h	574	0644	edit dl rm
hdlcdrv.h	2845	0644	edit dl rm
hdreg.h	22640	0644	edit dl rm
hid.h	1824	0644	edit dl rm
hiddev.h	6265	0644	edit dl rm
hidraw.h	1217	0644	edit dl rm
hpet.h	686	0644	edit dl rm
hysdn_if.h	1319	0644	edit dl rm
i2c-dev.h	2403	0644	edit dl rm
i2c.h	6631	0644	edit dl rm
i2o-dev.h	11488	0644	edit dl rm
i8k.h	1438	0644	edit dl rm
icmp.h	2892	0644	edit dl rm
icmpv6.h	3831	0644	edit dl rm
if.h	8673	0644	edit dl rm
if_addr.h	1456	0644	edit dl rm
if_addrlabel.h	658	0644	edit dl rm
if_arcnet.h	3718	0644	edit dl rm
if_arp.h	6109	0644	edit dl rm
if_bonding.h	4076	0644	edit dl rm
if_bridge.h	3810	0644	edit dl rm
if_cablemodem.h	910	0644	edit dl rm
if_ec.h	901	0644	edit dl rm
if_eql.h	1284	0644	edit dl rm
if_ether.h	6539	0644	edit dl rm
if_fc.h	1674	0644	edit dl rm
if_fddi.h	3700	0644	edit dl rm
if_frad.h	2940	0644	edit dl rm
if_hippi.h	4175	0644	edit dl rm
if_infiniband.h	1145	0644	edit dl rm
if_link.h	12078	0644	edit dl rm
if_ltalk.h	125	0644	edit dl rm
if_packet.h	3530	0644	edit dl rm
if_phonet.h	337	0644	edit dl rm
if_plip.h	596	0644	edit dl rm
if_ppp.h	6938	0644	edit dl rm
if_pppol2tp.h	1983	0644	edit dl rm
if_pppox.h	3772	0644	edit dl rm
if_slip.h	809	0644	edit dl rm
if_strip.h	700	0644	edit dl rm
if_tr.h	3199	0644	edit dl rm
if_tun.h	3014	0644	edit dl rm
if_tunnel.h	1459	0644	edit dl rm
if_vlan.h	1708	0644	edit dl rm
igmp.h	2928	0644	edit dl rm
in.h	9203	0644	edit dl rm
in6.h	7495	0644	edit dl rm
inet_diag.h	2453	0644	edit dl rm
inotify.h	2838	0644	edit dl rm
input.h	27594	0644	edit dl rm
in_route.h	873	0644	edit dl rm
ioctl.h	100	0644	edit dl rm
ip.h	3555	0644	edit dl rm
ip6_tunnel.h	1073	0644	edit dl rm
ipc.h	2038	0644	edit dl rm
ipmi.h	16543	0644	edit dl rm
ipmi_msgdefs.h	4477	0644	edit dl rm
ipsec.h	884	0644	edit dl rm
ipv6.h	2892	0644	edit dl rm
ipv6_route.h	1614	0644	edit dl rm
ipx.h	1824	0644	edit dl rm
ip_vs.h	12583	0644	edit dl rm
irda.h	7651	0644	edit dl rm
irqnr.h	93	0644	edit dl rm
isdn.h	5687	0644	edit dl rm
isdnif.h	2306	0644	edit dl rm
isdn_divertif.h	1038	0644	edit dl rm
isdn_ppp.h	1859	0644	edit dl rm
iso_fs.h	6439	0644	edit dl rm
ivtv.h	2726	0644	edit dl rm
ivtvfb.h	1143	0644	edit dl rm
ixjuser.h	25116	0644	edit dl rm
jffs2.h	6949	0644	edit dl rm
joystick.h	3587	0644	edit dl rm
kd.h	6169	0644	edit dl rm
kdev_t.h	298	0644	edit dl rm
kernel.h	2457	0644	edit dl rm
kernelcapi.h	959	0644	edit dl rm
keyboard.h	12695	0644	edit dl rm
keyctl.h	2984	0644	edit dl rm
kvm.h	20681	0644	edit dl rm
kvm_para.h	564	0644	edit dl rm
libc-compat.h	3540	0644	edit dl rm
limits.h	874	0644	edit dl rm
llc.h	2835	0644	edit dl rm
loop.h	2189	0644	edit dl rm
lp.h	3794	0644	edit dl rm
magic.h	2292	0644	edit dl rm
major.h	4655	0644	edit dl rm
map_to_7segment.h	7187	0644	edit dl rm
matroxfb.h	1429	0644	edit dl rm
mempolicy.h	2052	0644	edit dl rm
meye.h	2544	0644	edit dl rm
mii.h	7950	0644	edit dl rm
minix_fs.h	2059	0644	edit dl rm
mman.h	230	0644	edit dl rm
mmtimer.h	2054	0644	edit dl rm
mqueue.h	2055	0644	edit dl rm
mroute.h	3813	0644	edit dl rm
mroute6.h	3991	0644	edit dl rm
msdos_fs.h	5839	0644	edit dl rm
msg.h	2539	0644	edit dl rm
mtio.h	8080	0644	edit dl rm
nbd.h	1958	0644	edit dl rm
ncp.h	5055	0644	edit dl rm
ncp_fs.h	3354	0644	edit dl rm
ncp_mount.h	2112	0644	edit dl rm
ncp_no.h	651	0644	edit dl rm
neighbour.h	4060	0644	edit dl rm
net.h	2021	0644	edit dl rm
netdevice.h	1771	0644	edit dl rm
netfilter.h	1546	0644	edit dl rm
netfilter_arp.h	380	0644	edit dl rm
netfilter_bridge.h	735	0644	edit dl rm
netfilter_decnet.h	1872	0644	edit dl rm
netfilter_ipv4.h	2032	0644	edit dl rm
netfilter_ipv6.h	2050	0644	edit dl rm
netlink.h	4969	0644	edit dl rm
netrom.h	719	0644	edit dl rm
net_dropmon.h	1091	0644	edit dl rm
net_tstamp.h	3468	0644	edit dl rm
nfs.h	4351	0644	edit dl rm
nfs2.h	1405	0644	edit dl rm
nfs3.h	2207	0644	edit dl rm
nfs4.h	5763	0644	edit dl rm
nfs4_mount.h	1869	0644	edit dl rm
nfsacl.h	577	0644	edit dl rm
nfs_fs.h	1552	0644	edit dl rm
nfs_idmap.h	2238	0644	edit dl rm
nfs_mount.h	3200	0644	edit dl rm
nl80211.h	192354	0644	edit dl rm
nubus.h	8366	0644	edit dl rm
nvram.h	470	0644	edit dl rm
n_r3964.h	2349	0644	edit dl rm
oom.h	456	0644	edit dl rm
param.h	78	0644	edit dl rm
parport.h	3644	0644	edit dl rm
patchkey.h	831	0644	edit dl rm
pci.h	1485	0644	edit dl rm
pci_regs.h	37975	0644	edit dl rm
perf_event.h	21849	0644	edit dl rm
personality.h	1998	0644	edit dl rm
pfkeyv2.h	10147	0644	edit dl rm
pg.h	2282	0644	edit dl rm
phantom.h	1590	0644	edit dl rm
phonet.h	4349	0644	edit dl rm
pktcdvd.h	2623	0644	edit dl rm
pkt_cls.h	9293	0644	edit dl rm
pkt_sched.h	10887	0644	edit dl rm
pmu.h	5187	0644	edit dl rm
poll.h	96	0644	edit dl rm
posix_types.h	1270	0644	edit dl rm
ppdev.h	3147	0644	edit dl rm
ppp-comp.h	6516	0644	edit dl rm
ppp_defs.h	6461	0644	edit dl rm
pps.h	3939	0644	edit dl rm
prctl.h	4972	0644	edit dl rm
ptp_clock.h	3496	0644	edit dl rm
ptrace.h	2290	0644	edit dl rm
qnx4_fs.h	2265	0644	edit dl rm
qnxtypes.h	561	0644	edit dl rm
quota.h	5723	0644	edit dl rm
radeonfb.h	297	0644	edit dl rm
random.h	1085	0644	edit dl rm
raw.h	302	0644	edit dl rm
reboot.h	1280	0644	edit dl rm
reiserfs_fs.h	907	0644	edit dl rm
reiserfs_xattr.h	465	0644	edit dl rm
resource.h	2087	0644	edit dl rm
rfkill.h	3384	0644	edit dl rm
romfs_fs.h	1127	0644	edit dl rm
rose.h	2100	0644	edit dl rm
route.h	2269	0644	edit dl rm
rtc.h	3696	0644	edit dl rm
rtnetlink.h	15335	0644	edit dl rm
scc.h	4543	0644	edit dl rm
sched.h	2096	0644	edit dl rm
screen_info.h	2202	0644	edit dl rm
sdla.h	2837	0644	edit dl rm
selinux_netlink.h	1132	0644	edit dl rm
sem.h	3666	0644	edit dl rm
serial.h	6780	0644	edit dl rm
serial_core.h	4024	0644	edit dl rm
serial_reg.h	13245	0644	edit dl rm
serio.h	1688	0644	edit dl rm
shm.h	2187	0644	edit dl rm
signal.h	129	0644	edit dl rm
signalfd.h	1096	0644	edit dl rm
smb.h	1209	0644	edit dl rm
smbno.h	14520	0644	edit dl rm
smb_fs.h	535	0644	edit dl rm
smb_mount.h	468	0644	edit dl rm
snmp.h	11157	0644	edit dl rm
socket.h	738	0644	edit dl rm
sockios.h	5967	0644	edit dl rm
som.h	5480	0644	edit dl rm
sonet.h	2207	0644	edit dl rm
sonypi.h	5136	0644	edit dl rm
sound.h	1099	0644	edit dl rm
soundcard.h	46019	0644	edit dl rm
stat.h	1005	0644	edit dl rm
stddef.h	633	0644	edit dl rm
string.h	175	0644	edit dl rm
suspend_ioctls.h	1368	0644	edit dl rm
swab.h	6292	0644	edit dl rm
synclink.h	8695	0644	edit dl rm
sysctl.h	26495	0644	edit dl rm
taskstats.h	6947	0644	edit dl rm
tcp.h	5205	0644	edit dl rm
telephony.h	9051	0644	edit dl rm
termios.h	544	0644	edit dl rm
time.h	1736	0644	edit dl rm
times.h	215	0644	edit dl rm
timex.h	6221	0644	edit dl rm
tiocl.h	1666	0644	edit dl rm
tipc.h	5910	0644	edit dl rm
tipc_config.h	15370	0644	edit dl rm
toshiba.h	1284	0644	edit dl rm
tty.h	128	0644	edit dl rm
types.h	991	0644	edit dl rm
udf_fs_i.h	634	0644	edit dl rm
udp.h	1166	0644	edit dl rm
uinput.h	5125	0644	edit dl rm
uio.h	648	0644	edit dl rm
ultrasound.h	4499	0644	edit dl rm
un.h	203	0644	edit dl rm
unistd.h	157	0644	edit dl rm
usbdevice_fs.h	5340	0644	edit dl rm
utime.h	152	0644	edit dl rm
utsname.h	606	0644	edit dl rm
uuid.h	1769	0644	edit dl rm
version.h	281	0644	edit dl rm
veth.h	474	0644	edit dl rm
vhost.h	4566	0644	edit dl rm
videodev.h	10513	0644	edit dl rm
videodev2.h	66071	0644	edit dl rm
videotext.h	4242	0644	edit dl rm
virtio_9p.h	351	0644	edit dl rm
virtio_balloon.h	1255	0644	edit dl rm
virtio_blk.h	2981	0644	edit dl rm
virtio_config.h	1284	0644	edit dl rm
virtio_console.h	1406	0644	edit dl rm
virtio_ids.h	545	0644	edit dl rm
virtio_net.h	7026	0644	edit dl rm
virtio_pci.h	2263	0644	edit dl rm
virtio_ring.h	4489	0644	edit dl rm
virtio_rng.h	265	0644	edit dl rm
vt.h	3070	0644	edit dl rm
wait.h	580	0644	edit dl rm
wanrouter.h	17836	0644	edit dl rm
watchdog.h	2400	0644	edit dl rm
wimax.h	8370	0644	edit dl rm
wireless.h	42653	0644	edit dl rm
x25.h	3418	0644	edit dl rm
xattr.h	646	0644	edit dl rm
xfrm.h	10558	0644	edit dl rm

Edit: /usr/include/linux/capability.h (10589B)

/*
 * This is <linux/capability.h>
 *
 * Andrew G. Morgan <morgan@kernel.org>
 * Alexander Kjeldaas <astor@guardian.no>
 * with help from Aleph1, Roland Buresund and Andrew Main.
 *
 * See here for the libcap library ("POSIX draft" compliance):
 *
 * ftp://www.kernel.org/pub/linux/libs/security/linux-privs/kernel-2.6/
 */

#ifndef _LINUX_CAPABILITY_H
#define _LINUX_CAPABILITY_H

#include <linux/types.h>

struct task_struct;

/* User-level do most of the mapping between kernel and user
   capabilities based on the version tag given by the kernel. The
   kernel might be somewhat backwards compatible, but don't bet on
   it. */

/* Note, cap_t, is defined by POSIX (draft) to be an "opaque" pointer to
   a set of three capability sets.  The transposition of 3*the
   following structure to such a composite is better handled in a user
   library since the draft standard requires the use of malloc/free
   etc.. */

#define _LINUX_CAPABILITY_VERSION_1  0x19980330
#define _LINUX_CAPABILITY_U32S_1     1

#define _LINUX_CAPABILITY_VERSION_2  0x20071026  /* deprecated - use v3 */
#define _LINUX_CAPABILITY_U32S_2     2

#define _LINUX_CAPABILITY_VERSION_3  0x20080522
#define _LINUX_CAPABILITY_U32S_3     2

typedef struct __user_cap_header_struct {
	__u32 version;
	int pid;
} *cap_user_header_t;

typedef struct __user_cap_data_struct {
        __u32 effective;
        __u32 permitted;
        __u32 inheritable;
} *cap_user_data_t;

#define XATTR_CAPS_SUFFIX "capability"
#define XATTR_NAME_CAPS XATTR_SECURITY_PREFIX XATTR_CAPS_SUFFIX

#define VFS_CAP_REVISION_MASK	0xFF000000
#define VFS_CAP_REVISION_SHIFT	24
#define VFS_CAP_FLAGS_MASK	~VFS_CAP_REVISION_MASK
#define VFS_CAP_FLAGS_EFFECTIVE	0x000001

#define VFS_CAP_REVISION_1	0x01000000
#define VFS_CAP_U32_1           1
#define XATTR_CAPS_SZ_1         (sizeof(__le32)*(1 + 2*VFS_CAP_U32_1))

#define VFS_CAP_REVISION_2	0x02000000
#define VFS_CAP_U32_2           2
#define XATTR_CAPS_SZ_2         (sizeof(__le32)*(1 + 2*VFS_CAP_U32_2))

#define XATTR_CAPS_SZ           XATTR_CAPS_SZ_2
#define VFS_CAP_U32             VFS_CAP_U32_2
#define VFS_CAP_REVISION	VFS_CAP_REVISION_2

struct vfs_cap_data {
	__le32 magic_etc;            /* Little endian */
	struct {
		__le32 permitted;    /* Little endian */
		__le32 inheritable;  /* Little endian */
	} data[VFS_CAP_U32];
};

/*
 * Backwardly compatible definition for source code - trapped in a
 * 32-bit world. If you find you need this, please consider using
 * libcap to untrap yourself...
 */
#define _LINUX_CAPABILITY_VERSION  _LINUX_CAPABILITY_VERSION_1
#define _LINUX_CAPABILITY_U32S     _LINUX_CAPABILITY_U32S_1

/**
 ** POSIX-draft defined capabilities.
 **/

/* In a system with the [_POSIX_CHOWN_RESTRICTED] option defined, this
   overrides the restriction of changing file ownership and group
   ownership. */

#define CAP_CHOWN            0

/* Override all DAC access, including ACL execute access if
   [_POSIX_ACL] is defined. Excluding DAC access covered by
   CAP_LINUX_IMMUTABLE. */

#define CAP_DAC_OVERRIDE     1

/* Overrides all DAC restrictions regarding read and search on files
   and directories, including ACL restrictions if [_POSIX_ACL] is
   defined. Excluding DAC access covered by CAP_LINUX_IMMUTABLE. */

#define CAP_DAC_READ_SEARCH  2

/* Overrides all restrictions about allowed operations on files, where
   file owner ID must be equal to the user ID, except where CAP_FSETID
   is applicable. It doesn't override MAC and DAC restrictions. */

#define CAP_FOWNER           3

/* Overrides the following restrictions that the effective user ID
   shall match the file owner ID when setting the S_ISUID and S_ISGID
   bits on that file; that the effective group ID (or one of the
   supplementary group IDs) shall match the file owner ID when setting
   the S_ISGID bit on that file; that the S_ISUID and S_ISGID bits are
   cleared on successful return from chown(2) (not implemented). */

#define CAP_FSETID           4

/* Overrides the restriction that the real or effective user ID of a
   process sending a signal must match the real or effective user ID
   of the process receiving the signal. */

#define CAP_KILL             5

/* Allows setgid(2) manipulation */
/* Allows setgroups(2) */
/* Allows forged gids on socket credentials passing. */

#define CAP_SETGID           6

/* Allows set*uid(2) manipulation (including fsuid). */
/* Allows forged pids on socket credentials passing. */

#define CAP_SETUID           7

/**
 ** Linux-specific capabilities
 **/

/* Without VFS support for capabilities:
 *   Transfer any capability in your permitted set to any pid,
 *   remove any capability in your permitted set from any pid
 * With VFS support for capabilities (neither of above, but)
 *   Add any capability from current's capability bounding set
 *       to the current process' inheritable set
 *   Allow taking bits out of capability bounding set
 *   Allow modification of the securebits for a process
 */

#define CAP_SETPCAP          8

/* Allow modification of S_IMMUTABLE and S_APPEND file attributes */

#define CAP_LINUX_IMMUTABLE  9

/* Allows binding to TCP/UDP sockets below 1024 */
/* Allows binding to ATM VCIs below 32 */

#define CAP_NET_BIND_SERVICE 10

/* Allow broadcasting, listen to multicast */

#define CAP_NET_BROADCAST    11

/* Allow administration of IP firewall, masquerading and accounting */
/* Allow setting debug option on sockets */
/* Allow modification of routing tables */
/* Allow binding to any address for transparent proxying */
/* Allow setting TOS (type of service) */
/* Allow setting promiscuous mode */
/* Allow clearing driver statistics */
/* Allow multicasting */
/* Allow read/write of device-specific registers */
/* Allow activation of ATM control sockets */

#define CAP_NET_ADMIN        12

/* Allow use of RAW sockets */
/* Allow use of PACKET sockets */

#define CAP_NET_RAW          13

/* Allow locking of shared memory segments */
/* Allow mlock and mlockall (which doesn't really have anything to do
   with IPC) */

#define CAP_IPC_LOCK         14

/* Override IPC ownership checks */

#define CAP_IPC_OWNER        15

/* Insert and remove kernel modules - modify kernel without limit */
#define CAP_SYS_MODULE       16

/* Allow ioperm/iopl access */
/* Allow O_DIRECT access */
/* Allow sending USB messages to any device via /proc/bus/usb */

#define CAP_SYS_RAWIO        17

/* Allow use of chroot() */

#define CAP_SYS_CHROOT       18

/* Allow ptrace() of any process */

#define CAP_SYS_PTRACE       19

/* Allow configuration of process accounting */

#define CAP_SYS_PACCT        20

/* Allow configuration of the secure attention key */
/* Allow administration of the random device */
/* Allow configuring the kernel's syslog (printk behaviour) */
/* Allow setting the domainname */
/* Allow setting the hostname */
/* Allow calling bdflush() */
/* Allow setting up new smb connection */
/* Allow some autofs root ioctls */
/* Allow nfsservctl */
/* Allow VM86_REQUEST_IRQ */
/* Allow to read/write pci config on alpha */
/* Allow irix_prctl on mips (setstacksize) */
/* Allow flushing all cache on m68k (sys_cacheflush) */
/* Allow locking/unlocking of shared memory segment */
/* Allow turning swap on/off */
/* Allow setting readahead and flushing buffers on block devices */
/* Allow setting geometry in floppy driver */
/* Allow turning DMA on/off in xd driver */
/* Allow administration of md devices (mostly the above, but some
   extra ioctls) */
/* Allow tuning the ide driver */
/* Allow access to the nvram device */
/* Allow administration of apm_bios, serial and bttv (TV) device */
/* Allow manufacturer commands in isdn CAPI support driver */
/* Allow reading non-standardized portions of pci configuration space */
/* Allow DDI debug ioctl on sbpcd driver */
/* Allow setting up serial ports */
/* Allow sending raw qic-117 commands */
/* Allow enabling/disabling tagged queuing on SCSI controllers and sending
   arbitrary SCSI commands */
/* Allow setting encryption key on loopback filesystem */
/* Allow setting zone reclaim policy */

#define CAP_SYS_ADMIN        21

/* Allow use of reboot() */

#define CAP_SYS_BOOT         22

/* Allow raising priority and setting priority on other (different
   UID) processes */
/* Allow use of FIFO and round-robin (realtime) scheduling on own
   processes and setting the scheduling algorithm used by another
   process. */
/* Allow setting cpu affinity on other processes */

#define CAP_SYS_NICE         23

/* Override resource limits. Set resource limits. */
/* Override quota limits. */
/* Override reserved space on ext2 filesystem */
/* Modify data journaling mode on ext3 filesystem (uses journaling
   resources) */
/* NOTE: ext2 honors fsuid when checking for resource overrides, so
   you can override using fsuid too */
/* Override size restrictions on IPC message queues */
/* Allow more than 64hz interrupts from the real-time clock */
/* Override max number of consoles on console allocation */
/* Override max number of keymaps */

#define CAP_SYS_RESOURCE     24

/* Allow manipulation of system clock */
/* Allow irix_stime on mips */
/* Allow setting the real-time clock */

#define CAP_SYS_TIME         25

/* Allow configuration of tty devices */
/* Allow vhangup() of tty */

#define CAP_SYS_TTY_CONFIG   26

/* Allow the privileged aspects of mknod() */

#define CAP_MKNOD            27

/* Allow taking of leases on files */

#define CAP_LEASE            28

#define CAP_AUDIT_WRITE      29

#define CAP_AUDIT_CONTROL    30

#define CAP_SETFCAP	     31

/* Override MAC access.
   The base kernel enforces no MAC policy.
   An LSM may enforce a MAC policy, and if it does and it chooses
   to implement capability based overrides of that policy, this is
   the capability it should use to do so. */

#define CAP_MAC_OVERRIDE     32

/* Allow MAC configuration or state changes.
   The base kernel requires no MAC configuration.
   An LSM may enforce a MAC policy, and if it does and it chooses
   to implement capability based checks on modifications to that
   policy or the data required to maintain it, this is the
   capability it should use to do so. */

#define CAP_MAC_ADMIN        33

#define CAP_LAST_CAP         CAP_MAC_ADMIN

#define cap_valid(x) ((x) >= 0 && (x) <= CAP_LAST_CAP)

/*
 * Bit location of each capability (used by user-space library and kernel)
 */

#define CAP_TO_INDEX(x)     ((x) >> 5)        /* 1 << 5 == bits in __u32 */
#define CAP_TO_MASK(x)      (1 << ((x) & 31)) /* mask for indexed __u32 */

#endif /* !_LINUX_CAPABILITY_H */

cmd: