summaryrefslogtreecommitdiff
path: root/src/cap-ng.h
diff options
context:
space:
mode:
authorAnas Nashif <anas.nashif@intel.com>2012-11-04 03:33:30 (GMT)
committerAnas Nashif <anas.nashif@intel.com>2012-11-04 03:33:30 (GMT)
commitc591394f75d0462d9d9a17d66c1bcf800181a294 (patch)
tree14dded8222a14c5f1f77c27a8c0e1d96ba2ec574 /src/cap-ng.h
downloadlibcap-ng-c591394f75d0462d9d9a17d66c1bcf800181a294.zip
libcap-ng-c591394f75d0462d9d9a17d66c1bcf800181a294.tar.gz
libcap-ng-c591394f75d0462d9d9a17d66c1bcf800181a294.tar.bz2
Imported Upstream version 0.6.6upstream/0.6.6upstream
Diffstat (limited to 'src/cap-ng.h')
-rw-r--r--src/cap-ng.h91
1 files changed, 91 insertions, 0 deletions
diff --git a/src/cap-ng.h b/src/cap-ng.h
new file mode 100644
index 0000000..89d63af
--- /dev/null
+++ b/src/cap-ng.h
@@ -0,0 +1,91 @@
+/* libcap-ng.h --
+ * Copyright 2009 Red Hat Inc., Durham, North Carolina.
+ * All Rights Reserved.
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 2.1 of the License, or (at your option) any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this library; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+ *
+ * Authors:
+ * Steve Grubb <sgrubb@redhat.com>
+ */
+
+#ifndef LIBCAP_NG_HEADER
+#define LIBCAP_NG_HEADER
+
+#include <stdint.h>
+#include <linux/capability.h>
+#include <unistd.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#ifndef CAP_LAST_CAP
+#define CAP_LAST_CAP CAP_AUDIT_CONTROL
+#endif
+
+typedef enum { CAPNG_DROP, CAPNG_ADD } capng_act_t;
+typedef enum { CAPNG_EFFECTIVE=1, CAPNG_PERMITTED=2,
+ CAPNG_INHERITABLE=4, CAPNG_BOUNDING_SET=8 } capng_type_t;
+typedef enum { CAPNG_SELECT_CAPS = 16, CAPNG_SELECT_BOUNDS = 32,
+ CAPNG_SELECT_BOTH = 48 } capng_select_t;
+typedef enum { CAPNG_FAIL=-1, CAPNG_NONE, CAPNG_PARTIAL,
+ CAPNG_FULL } capng_results_t;
+typedef enum { CAPNG_PRINT_STDOUT, CAPNG_PRINT_BUFFER } capng_print_t;
+typedef enum { CAPNG_NO_FLAG=0, CAPNG_DROP_SUPP_GRP=1,
+ CAPNG_CLEAR_BOUNDING=2 } capng_flags_t;
+
+
+// These functions manipulate process capabilities
+void capng_clear(capng_select_t set);
+void capng_fill(capng_select_t set);
+void capng_setpid(int pid);
+int capng_get_caps_process(void);
+int capng_update(capng_act_t action, capng_type_t type,unsigned int capability);
+int capng_updatev(capng_act_t action, capng_type_t type,
+ unsigned int capability, ...);
+
+// These functions apply the capabilities previously setup to a process
+int capng_apply(capng_select_t set);
+int capng_lock(void);
+int capng_change_id(int uid, int gid, capng_flags_t flag);
+
+// These functions are used for file based capabilities
+int capng_get_caps_fd(int fd);
+int capng_apply_caps_fd(int fd);
+
+// These functions check capability bits
+capng_results_t capng_have_capabilities(capng_select_t set);
+int capng_have_capability(capng_type_t which, unsigned int capability);
+
+// These functions printout capabilities
+char *capng_print_caps_numeric(capng_print_t where, capng_select_t set);
+char *capng_print_caps_text(capng_print_t where, capng_type_t which);
+
+// These functions convert between numeric and text string
+int capng_name_to_capability(const char *name);
+const char *capng_capability_to_name(unsigned int capability);
+
+// These function should be used when you suspect a third party library
+// may use libcap-ng also and want to make sure it doesn't alter something
+// important. Otherwise you shouldn't need to call these.
+void *capng_save_state(void);
+void capng_restore_state(void **state);
+
+#ifdef __cplusplus
+}
+#endif
+
+
+#endif