#define VC_IATTR_BARRIER 0x00010000u
#define VC_IATTR_IUNLINK 0x00020000u
#define VC_IATTR_IMMUTABLE 0x00040000u
+#define VC_IATTR_COW 0x00080000u
// the flags
// the ccapabilities
#define VC_VXC_SET_UTSNAME 0x00000001ull
#define VC_VXC_SET_RLIMIT 0x00000002ull
+#define VC_VXC_FS_SECURITY 0x00000004ull
+#define VC_VXC_TIOCSTI 0x00000010ull
#define VC_VXC_RAW_ICMP 0x00000100ull
#define VC_VXC_SYSLOG 0x00001000ull
+#define VC_VXC_OOM_ADJUST 0x00002000ull
+#define VC_VXC_AUDIT_CONTROL 0x00004000ull
#define VC_VXC_SECURE_MOUNT 0x00010000ull
#define VC_VXC_SECURE_REMOUNT 0x00020000ull
uint_least64_t vc_get_insecurebcaps() VC_ATTR_CONST;
inline static uint_least64_t vc_get_insecureccaps() {
- return ~(VC_VXC_SET_UTSNAME|VC_VXC_RAW_ICMP);
+ return ~(VC_VXC_SET_UTSNAME|VC_VXC_RAW_ICMP|VC_VXC_AUDIT_CONTROL);
}
inline static int vc_setfilecontext(char const *filename, xid_t xid) {
vcFEATURE_VSHELPER0, vcFEATURE_VSHELPER, vcFEATURE_VWAIT,
vcFEATURE_VNET, vcFEATURE_VSTAT, vcFEATURE_PPTAG,
vcFEATURE_PIDSPACE, vcFEATURE_SPACES, vcFEATURE_PERSISTENT,
+ vcFEATURE_PIVOT_ROOT,
}
vcFeatureSet;