SECBIT_NOROOT (1 << 0) SECBIT_NOROOT_LOCKED (1 << 1) SECBIT_NO_SETUID_FIXUP (1 << 2) SECBIT_NO_SETUID_FIXUP_LOCKED (1 << 3) SECBIT_KEEP_CAPS (1 << 4) SECBIT_KEEP_CAPS_LOCKED (1 << 5) SECBIT_NO_CAP_AMBIENT_RAISE (1 << 6) SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED (1 << 7)