/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
/*
 * Linus Security Modules (LSM) - User space API
 *
 * Copyright (C) 2022 Casey Schaufler <[email protected]>
 * Copyright (C) Intel Corporation
 */

#ifndef _UAPI_LINUX_LSM_H
#define _UAPI_LINUX_LSM_H

/*
 * ID values to identify security modules.
 * A system may use more than one security module.
 *
 * LSM_ID_XXX values 32 and below are reserved for future use
 */
#define LSM_ID_INVALID        -1
#define LSM_ID_SELINUX        33
#define LSM_ID_SMACK        34
#define LSM_ID_TOMOYO        35
#define LSM_ID_IMA        36
#define LSM_ID_APPARMOR        37
#define LSM_ID_YAMA        38
#define LSM_ID_LOADPIN        39
#define LSM_ID_SAFESETID    40
#define LSM_ID_LOCKDOWN        41
#define LSM_ID_BPF        42
#define LSM_ID_LANDLOCK        43
#define LSM_ID_CAPABILITY    44

/*
 * LSM_ATTR_XXX values identify the /proc/.../attr entry that the
 * context represents. Not all security modules provide all of these
 * values. Some security modules provide none of them.
 */
/* clang-format off */
#define LSM_ATTR_CURRENT    (1UL << 0)
#define LSM_ATTR_EXEC        (1UL << 1)
#define LSM_ATTR_FSCREATE    (1UL << 2)
#define LSM_ATTR_KEYCREATE    (1UL << 3)
#define LSM_ATTR_PREV        (1UL << 4)
#define LSM_ATTR_SOCKCREATE    (1UL << 5)
/* clang-format on */

#endif /* _UAPI_LINUX_LSM_H */