Line data    Source code

       1             : /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
       2             : 
       3             : #pragma once
       4             : 
       5             : /***
       6             :   This file is part of systemd.
       7             : 
       8             :   Copyright 2010 Lennart Poettering
       9             : 
      10             :   systemd is free software; you can redistribute it and/or modify it
      11             :   under the terms of the GNU Lesser General Public License as published by
      12             :   the Free Software Foundation; either version 2.1 of the License, or
      13             :   (at your option) any later version.
      14             : 
      15             :   systemd is distributed in the hope that it will be useful, but
      16             :   WITHOUT ANY WARRANTY; without even the implied warranty of
      17             :   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
      18             :   Lesser General Public License for more details.
      19             : 
      20             :   You should have received a copy of the GNU Lesser General Public License
      21             :   along with systemd; If not, see <http://www.gnu.org/licenses/>.
      22             : ***/
      23             : 
      24             : #include <stdbool.h>
      25             : #include <sys/capability.h>
      26             : 
      27             : #include "util.h"
      28             : 
      29             : unsigned long cap_last_cap(void);
      30             : int have_effective_cap(int value);
      31             : int capability_bounding_set_drop(uint64_t drop, bool right_now);
      32             : int capability_bounding_set_drop_usermode(uint64_t drop);
      33             : 
      34             : int drop_privileges(uid_t uid, gid_t gid, uint64_t keep_capabilities);
      35             : 
      36             : int drop_capability(cap_value_t cv);
      37             : 
      38           0 : DEFINE_TRIVIAL_CLEANUP_FUNC(cap_t, cap_free);
      39             : #define _cleanup_cap_free_ _cleanup_(cap_freep)
      40             : 
      41          38 : static inline void cap_free_charpp(char **p) {
      42          38 :         if (*p)
      43          38 :                 cap_free(*p);
      44          38 : }
      45             : #define _cleanup_cap_free_charp_ _cleanup_(cap_free_charpp)