projects / mirror_frr.git / blame
| Commit | Line | Data |
|---|---|---|
| d62a17ae | 1 | /* |
| 01245821 | 2 | * Zebra privileges header. |
| 3 | * | |
| 4 | * Copyright (C) 2003 Paul Jakma. | |
| 5 | * | |
| 6 | * This file is part of GNU Zebra. | |
| 7 | * | |
| 8 | * GNU Zebra is free software; you can redistribute it and/or modify it | |
| 9 | * under the terms of the GNU General Public License as published by the | |
| 10 | * Free Software Foundation; either version 2, or (at your option) any | |
| 11 | * later version. | |
| 12 | * | |
| 13 | * GNU Zebra is distributed in the hope that it will be useful, but | |
| 14 | * WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 15 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
| 16 | * General Public License for more details. | |
| 17 | * | |
| 896014f4 DL |
18 | * You should have received a copy of the GNU General Public License along |
| 19 | * with this program; see the file COPYING; if not, write to the Free Software | |
| 20 | * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA | |
| 01245821 | 21 | */ |
| 22 | ||
| 23 | #ifndef _ZEBRA_PRIVS_H | |
| 24 | #define _ZEBRA_PRIVS_H | |
| 25 | ||
| 26 | /* list of zebra capabilities */ | |
| d62a17ae | 27 | typedef enum { |
| 28 | ZCAP_SETID, | |
| 29 | ZCAP_BIND, | |
| 30 | ZCAP_NET_ADMIN, | |
| 31 | ZCAP_SYS_ADMIN, | |
| 32 | ZCAP_NET_RAW, | |
| 33 | ZCAP_CHROOT, | |
| 34 | ZCAP_NICE, | |
| 35 | ZCAP_PTRACE, | |
| 36 | ZCAP_DAC_OVERRIDE, | |
| 37 | ZCAP_READ_SEARCH, | |
| 38 | ZCAP_FOWNER, | |
| 39 | ZCAP_MAX | |
| 01245821 | 40 | } zebra_capabilities_t; |
| 41 | ||
| d62a17ae | 42 | typedef enum { |
| 43 | ZPRIVS_LOWERED, | |
| 44 | ZPRIVS_RAISED, | |
| 45 | ZPRIVS_UNKNOWN, | |
| 01245821 | 46 | } zebra_privs_current_t; |
| 47 | ||
| d62a17ae | 48 | typedef enum { |
| 49 | ZPRIVS_RAISE, | |
| 50 | ZPRIVS_LOWER, | |
| 01245821 | 51 | } zebra_privs_ops_t; |
| 52 | ||
| d62a17ae | 53 | struct zebra_privs_t { |
| 54 | zebra_capabilities_t *caps_p; /* caps required for operation */ | |
| 55 | zebra_capabilities_t *caps_i; /* caps to allow inheritance of */ | |
| 56 | int cap_num_p; /* number of caps in arrays */ | |
| 57 | int cap_num_i; | |
| 58 | const char *user; /* user and group to run as */ | |
| 59 | const char *group; | |
| 60 | const char *vty_group; /* group to chown vty socket to */ | |
| 61 | /* methods */ | |
| 62 | int (*change)(zebra_privs_ops_t); /* change privileges, 0 on success */ | |
| 63 | zebra_privs_current_t (*current_state)( | |
| 64 | void); /* current privilege state */ | |
| 01245821 | 65 | }; |
| 66 | ||
| d62a17ae | 67 | struct zprivs_ids_t { |
| 68 | /* -1 is undefined */ | |
| 69 | uid_t uid_priv; /* privileged uid */ | |
| 70 | uid_t uid_normal; /* normal uid */ | |
| 71 | gid_t gid_priv; /* privileged uid */ | |
| 72 | gid_t gid_normal; /* normal uid */ | |
| 73 | gid_t gid_vty; /* vty gid */ | |
| ba3a0bc5 | 74 | }; |
| 75 | ||
| d62a17ae | 76 | /* initialise zebra privileges */ |
| 77 | extern void zprivs_init(struct zebra_privs_t *zprivs); | |
| 78 | /* drop all and terminate privileges */ | |
| 79 | extern void zprivs_terminate(struct zebra_privs_t *); | |
| 80 | /* query for runtime uid's and gid's, eg vty needs this */ | |
| 8cc4198f | 81 | extern void zprivs_get_ids(struct zprivs_ids_t *); |
| 01245821 | 82 | |
| 83 | #endif /* _ZEBRA_PRIVS_H */ |