lib/privs.h

   1 /*
   2  * Zebra privileges header.
   3  *
   4  * Copyright (C) 2003 Paul Jakma.
   5  *
   6  * This file is part of GNU Zebra.
   7  *
   8  * GNU Zebra is free software; you can redistribute it and/or modify it
   9  * under the terms of the GNU General Public License as published by the
  10  * Free Software Foundation; either version 2, or (at your option) any
  11  * later version.
  12  *
  13  * GNU Zebra is distributed in the hope that it will be useful, but
  14  * WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  16  * General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU General Public License
  19  * along with GNU Zebra; see the file COPYING.  If not, write to the Free
  20  * Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
  21  * 02111-1307, USA.
  22  */
  23
  24 #ifndef _ZEBRA_PRIVS_H
  25 #define _ZEBRA_PRIVS_H
  26
  27 /* list of zebra capabilities */
  28 typedef enum
  29 {
  30   ZCAP_SETGID,
  31   ZCAP_SETUID,
  32   ZCAP_BIND,
  33   ZCAP_BROADCAST,
  34   ZCAP_ADMIN,
  35   ZCAP_SYS_ADMIN,
  36   ZCAP_RAW,
  37   ZCAP_CHROOT,
  38   ZCAP_NICE,
  39   ZCAP_PTRACE,
  40   ZCAP_DAC_OVERRIDE,
  41   ZCAP_READ_SEARCH,
  42   ZCAP_FOWNER,
  43   ZCAP_MAX
  44 } zebra_capabilities_t;
  45
  46 typedef enum
  47 {
  48   ZPRIVS_LOWERED,
  49   ZPRIVS_RAISED
  50 } zebra_privs_current_t;
  51
  52 typedef enum
  53 {
  54   ZPRIVS_RAISE,
  55   ZPRIVS_LOWER,
  56 } zebra_privs_ops_t;
  57
  58 struct zebra_privs_t
  59 {
  60   zebra_capabilities_t *caps_p;       /* caps required for operation */
  61   zebra_capabilities_t *caps_i;       /* caps to allow inheritance of */
  62   int cap_num_p;                      /* number of caps in arrays */
  63   int cap_num_i;
  64   char *user;                         /* user and group to run as */
  65   char *group;
  66
  67   /* methods */
  68   int
  69     (*change) (zebra_privs_ops_t);    /* change privileges, 0 on success */
  70   zebra_privs_current_t
  71     (*current_state) (void);          /* current privilege state */
  72 };
  73
  74   /* initialise zebra privileges */
  75 void zprivs_init (struct zebra_privs_t *zprivs);
  76   /* drop all and terminate privileges */
  77 void zprivs_terminate (void);
  78
  79 #endif /* _ZEBRA_PRIVS_H */