1/* libcap-ng.h --
2 * Copyright 2009, 2013 Red Hat Inc., Durham, North Carolina.
3 * All Rights Reserved.
4 *
5 * This library is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU Lesser General Public
7 * License as published by the Free Software Foundation; either
8 * version 2.1 of the License, or (at your option) any later version.
9 *
10 * This library is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 * Lesser General Public License for more details.
14 *
15 * You should have received a copy of the GNU Lesser General Public
16 * License along with this library; if not, write to the Free Software
17 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
18 *
19 * Authors:
20 * Steve Grubb <sgrubb@redhat.com>
21 */
22
23#ifndef LIBCAP_NG_HEADER
24#define LIBCAP_NG_HEADER
25
26#include <stdint.h>
27#include <linux/capability.h>
28#include <unistd.h>
29
30#ifdef __cplusplus
31extern "C" {
32#endif
33
34typedef enum { CAPNG_DROP, CAPNG_ADD } capng_act_t;
35typedef enum { CAPNG_EFFECTIVE=1, CAPNG_PERMITTED=2,
36 CAPNG_INHERITABLE=4, CAPNG_BOUNDING_SET=8 } capng_type_t;
37typedef enum { CAPNG_SELECT_CAPS = 16, CAPNG_SELECT_BOUNDS = 32,
38 CAPNG_SELECT_BOTH = 48 } capng_select_t;
39typedef enum { CAPNG_FAIL=-1, CAPNG_NONE, CAPNG_PARTIAL,
40 CAPNG_FULL } capng_results_t;
41typedef enum { CAPNG_PRINT_STDOUT, CAPNG_PRINT_BUFFER } capng_print_t;
42typedef enum { CAPNG_NO_FLAG=0, CAPNG_DROP_SUPP_GRP=1,
43 CAPNG_CLEAR_BOUNDING=2, CAPNG_INIT_SUPP_GRP=4 } capng_flags_t;
44
45
46// These functions manipulate process capabilities
47void capng_clear(capng_select_t set);
48void capng_fill(capng_select_t set);
49void capng_setpid(int pid);
50int capng_get_caps_process(void);
51int capng_update(capng_act_t action, capng_type_t type,unsigned int capability);
52int capng_updatev(capng_act_t action, capng_type_t type,
53 unsigned int capability, ...);
54
55// These functions apply the capabilities previously setup to a process
56int capng_apply(capng_select_t set);
57int capng_lock(void);
58int capng_change_id(int uid, int gid, capng_flags_t flag);
59
60// These functions are used for file based capabilities
61int capng_get_caps_fd(int fd);
62int capng_apply_caps_fd(int fd);
63
64// These functions check capability bits
65capng_results_t capng_have_capabilities(capng_select_t set);
66int capng_have_capability(capng_type_t which, unsigned int capability);
67
68// These functions printout capabilities
69char *capng_print_caps_numeric(capng_print_t where, capng_select_t set);
70char *capng_print_caps_text(capng_print_t where, capng_type_t which);
71
72// These functions convert between numeric and text string
73int capng_name_to_capability(const char *name);
74const char *capng_capability_to_name(unsigned int capability);
75
76// These function should be used when you suspect a third party library
77// may use libcap-ng also and want to make sure it doesn't alter something
78// important. Otherwise you shouldn't need to call these.
79void *capng_save_state(void);
80void capng_restore_state(void **state);
81
82#ifdef __cplusplus
83}
84#endif
85
86
87#endif
88