[PATCH v3 1/2] capability: add cap_isidentical
Mateusz Guzik
mjguzik at gmail.com
Wed Jan 25 15:55:56 UTC 2023
Signed-off-by: Mateusz Guzik <mjguzik at gmail.com>
Reviewed-by: Serge Hallyn <serge at hallyn.com>
---
include/linux/capability.h | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/include/linux/capability.h b/include/linux/capability.h
index 65efb74c3585..736a973c677a 100644
--- a/include/linux/capability.h
+++ b/include/linux/capability.h
@@ -156,6 +156,16 @@ static inline bool cap_isclear(const kernel_cap_t a)
return true;
}
+static inline bool cap_isidentical(const kernel_cap_t a, const kernel_cap_t b)
+{
+ unsigned __capi;
+ CAP_FOR_EACH_U32(__capi) {
+ if (a.cap[__capi] != b.cap[__capi])
+ return false;
+ }
+ return true;
+}
+
/*
* Check if "a" is a subset of "set".
* return true if ALL of the capabilities in "a" are also in "set"
--
2.39.0
More information about the Linux-security-module-archive
mailing list