projects / systemd.git / blame
| Commit | Line | Data |
|---|---|---|
| 663996b3 MS |
1 | /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/ |
| 2 | ||
| 60f067b4 | 3 | #pragma once |
| 663996b3 MS |
4 | |
| 5 | /*** | |
| 6 | This file is part of systemd. | |
| 7 | ||
| 8 | Copyright 2010 Lennart Poettering | |
| 9 | ||
| 10 | systemd is free software; you can redistribute it and/or modify it | |
| 11 | under the terms of the GNU Lesser General Public License as published by | |
| 12 | the Free Software Foundation; either version 2.1 of the License, or | |
| 13 | (at your option) any later version. | |
| 14 | ||
| 15 | systemd is distributed in the hope that it will be useful, but | |
| 16 | WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 17 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
| 18 | Lesser General Public License for more details. | |
| 19 | ||
| 20 | You should have received a copy of the GNU Lesser General Public License | |
| 21 | along with systemd; If not, see <http://www.gnu.org/licenses/>. | |
| 22 | ***/ | |
| 23 | ||
| 24 | #include <inttypes.h> | |
| 25 | #include <stdbool.h> | |
| 60f067b4 JS |
26 | #include <sys/capability.h> |
| 27 | ||
| 28 | #include "util.h" | |
| 663996b3 MS |
29 | |
| 30 | unsigned long cap_last_cap(void); | |
| 31 | int have_effective_cap(int value); | |
| 32 | int capability_bounding_set_drop(uint64_t drop, bool right_now); | |
| 33 | int capability_bounding_set_drop_usermode(uint64_t drop); | |
| 34 | ||
| 60f067b4 JS |
35 | int drop_privileges(uid_t uid, gid_t gid, uint64_t keep_capabilites); |
| 36 | ||
| 37 | DEFINE_TRIVIAL_CLEANUP_FUNC(cap_t, cap_free); | |
| 38 | #define _cleanup_cap_free_ _cleanup_(cap_freep) | |
| 39 | ||
| 40 | static inline void cap_free_charpp(char **p) { | |
| 41 | if (*p) | |
| 42 | cap_free(*p); | |
| 43 | } | |
| 44 | #define _cleanup_cap_free_charp_ _cleanup_(cap_free_charpp) |