SECBIT_EXEC_RESTRICT_FILE
restrict_file = !!(secbits & SECBIT_EXEC_RESTRICT_FILE);
secbits_new |= SECBIT_EXEC_RESTRICT_FILE |
secbits |= SECBIT_EXEC_RESTRICT_FILE;
secbits &= ~(SECBIT_EXEC_RESTRICT_FILE | SECBIT_EXEC_DENY_INTERACTIVE);
secbits |= SECBIT_EXEC_RESTRICT_FILE;
secbits &= ~SECBIT_EXEC_RESTRICT_FILE;
secbits &= ~SECBIT_EXEC_RESTRICT_FILE;