]> git.proxmox.com Git - mirror_lxc.git/blob - src/lxc/caps.h
lxc-start: exit early and cleanly if we have insufficient privs
[mirror_lxc.git] / src / lxc / caps.h
1 /*
2 * lxc: linux Container library
3 *
4 * (C) Copyright IBM Corp. 2007, 2008
5 *
6 * Authors:
7 * Daniel Lezcano <dlezcano at fr.ibm.com>
8 *
9 * This library is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU Lesser General Public
11 * License as published by the Free Software Foundation; either
12 * version 2.1 of the License, or (at your option) any later version.
13 *
14 * This library is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 * Lesser General Public License for more details.
18 *
19 * You should have received a copy of the GNU Lesser General Public
20 * License along with this library; if not, write to the Free Software
21 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 */
23 #ifndef _caps_h
24 #define _caps_h
25
26 extern int lxc_caps_reset(void);
27 extern int lxc_caps_down(void);
28 extern int lxc_caps_up(void);
29 extern int lxc_caps_init(void);
30 extern int lxc_caps_check(void);
31
32 extern int lxc_caps_last_cap(void);
33
34 #define lxc_priv(__lxc_function) \
35 ({ \
36 int __ret, __ret2, __errno = 0; \
37 __ret = lxc_caps_up(); \
38 if (__ret) \
39 goto __out; \
40 __ret = __lxc_function; \
41 if (__ret) \
42 __errno = errno; \
43 __ret2 = lxc_caps_down(); \
44 __out: __ret ? errno = __errno,__ret : __ret2; \
45 })
46
47 #define lxc_unpriv(__lxc_function) \
48 ({ \
49 int __ret, __ret2, __errno = 0; \
50 __ret = lxc_caps_down(); \
51 if (__ret) \
52 goto __out; \
53 __ret = __lxc_function; \
54 if (__ret) \
55 __errno = errno; \
56 __ret2 = lxc_caps_up(); \
57 __out: __ret ? errno = __errno,__ret : __ret2; \
58 })
59 #endif