1 | /* libcap-ng.h -- |
2 | * Copyright 2009, 2013 Red Hat Inc., Durham, North Carolina. |
3 | * All Rights Reserved. |
4 | * |
5 | * This library is free software; you can redistribute it and/or |
6 | * modify it under the terms of the GNU Lesser General Public |
7 | * License as published by the Free Software Foundation; either |
8 | * version 2.1 of the License, or (at your option) any later version. |
9 | * |
10 | * This library is distributed in the hope that it will be useful, |
11 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
12 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
13 | * Lesser General Public License for more details. |
14 | * |
15 | * You should have received a copy of the GNU Lesser General Public |
16 | * License along with this library; if not, write to the Free Software |
17 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
18 | * |
19 | * Authors: |
20 | * Steve Grubb <sgrubb@redhat.com> |
21 | */ |
22 | |
23 | #ifndef LIBCAP_NG_HEADER |
24 | #define |
25 | |
26 | #include <stdint.h> |
27 | #include <linux/capability.h> |
28 | #include <unistd.h> |
29 | |
30 | #ifdef __cplusplus |
31 | extern "C" { |
32 | #endif |
33 | |
34 | typedef enum { CAPNG_DROP, CAPNG_ADD } capng_act_t; |
35 | typedef enum { CAPNG_EFFECTIVE=1, CAPNG_PERMITTED=2, |
36 | CAPNG_INHERITABLE=4, CAPNG_BOUNDING_SET=8 } capng_type_t; |
37 | typedef enum { CAPNG_SELECT_CAPS = 16, CAPNG_SELECT_BOUNDS = 32, |
38 | CAPNG_SELECT_BOTH = 48 } capng_select_t; |
39 | typedef enum { CAPNG_FAIL=-1, CAPNG_NONE, CAPNG_PARTIAL, |
40 | CAPNG_FULL } capng_results_t; |
41 | typedef enum { CAPNG_PRINT_STDOUT, CAPNG_PRINT_BUFFER } capng_print_t; |
42 | typedef enum { CAPNG_NO_FLAG=0, CAPNG_DROP_SUPP_GRP=1, |
43 | CAPNG_CLEAR_BOUNDING=2, CAPNG_INIT_SUPP_GRP=4 } capng_flags_t; |
44 | |
45 | |
46 | // These functions manipulate process capabilities |
47 | void capng_clear(capng_select_t set); |
48 | void capng_fill(capng_select_t set); |
49 | void capng_setpid(int pid); |
50 | int capng_get_caps_process(void); |
51 | int capng_update(capng_act_t action, capng_type_t type,unsigned int capability); |
52 | int capng_updatev(capng_act_t action, capng_type_t type, |
53 | unsigned int capability, ...); |
54 | |
55 | // These functions apply the capabilities previously setup to a process |
56 | int capng_apply(capng_select_t set); |
57 | int capng_lock(void); |
58 | int capng_change_id(int uid, int gid, capng_flags_t flag); |
59 | |
60 | // These functions are used for file based capabilities |
61 | int capng_get_caps_fd(int fd); |
62 | int capng_apply_caps_fd(int fd); |
63 | |
64 | // These functions check capability bits |
65 | capng_results_t capng_have_capabilities(capng_select_t set); |
66 | int capng_have_capability(capng_type_t which, unsigned int capability); |
67 | |
68 | // These functions printout capabilities |
69 | char *capng_print_caps_numeric(capng_print_t where, capng_select_t set); |
70 | char *capng_print_caps_text(capng_print_t where, capng_type_t which); |
71 | |
72 | // These functions convert between numeric and text string |
73 | int capng_name_to_capability(const char *name); |
74 | const char *capng_capability_to_name(unsigned int capability); |
75 | |
76 | // These function should be used when you suspect a third party library |
77 | // may use libcap-ng also and want to make sure it doesn't alter something |
78 | // important. Otherwise you shouldn't need to call these. |
79 | void *capng_save_state(void); |
80 | void capng_restore_state(void **state); |
81 | |
82 | #ifdef __cplusplus |
83 | } |
84 | #endif |
85 | |
86 | |
87 | #endif |
88 | |