1/* libcap-ng.h -- 2 * Copyright 2009 Red Hat Inc., Durham, North Carolina. 3 * All Rights Reserved. 4 * 5 * This library is free software; you can redistribute it and/or 6 * modify it under the terms of the GNU Lesser General Public 7 * License as published by the Free Software Foundation; either 8 * version 2.1 of the License, or (at your option) any later version. 9 * 10 * This library is distributed in the hope that it will be useful, 11 * but WITHOUT ANY WARRANTY; without even the implied warranty of 12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 13 * Lesser General Public License for more details. 14 * 15 * You should have received a copy of the GNU Lesser General Public 16 * License along with this library; if not, write to the Free Software 17 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 18 * 19 * Authors: 20 * Steve Grubb <sgrubb@redhat.com> 21 */ 22 23#ifndef LIBCAP_NG_HEADER 24#define LIBCAP_NG_HEADER 25 26#include <stdint.h> 27#include <linux/capability.h> 28#include <unistd.h> 29 30#ifdef __cplusplus 31extern "C" { 32#endif 33 34#ifndef CAP_LAST_CAP 35#define CAP_LAST_CAP CAP_AUDIT_CONTROL 36#endif 37 38typedef enum { CAPNG_DROP, CAPNG_ADD } capng_act_t; 39typedef enum { CAPNG_EFFECTIVE=1, CAPNG_PERMITTED=2, 40 CAPNG_INHERITABLE=4, CAPNG_BOUNDING_SET=8 } capng_type_t; 41typedef enum { CAPNG_SELECT_CAPS = 16, CAPNG_SELECT_BOUNDS = 32, 42 CAPNG_SELECT_BOTH = 48 } capng_select_t; 43typedef enum { CAPNG_FAIL=-1, CAPNG_NONE, CAPNG_PARTIAL, 44 CAPNG_FULL } capng_results_t; 45typedef enum { CAPNG_PRINT_STDOUT, CAPNG_PRINT_BUFFER } capng_print_t; 46typedef enum { CAPNG_NO_FLAG=0, CAPNG_DROP_SUPP_GRP=1, 47 CAPNG_CLEAR_BOUNDING=2 } capng_flags_t; 48 49 50// These functions manipulate process capabilities 51void capng_clear(capng_select_t set); 52void capng_fill(capng_select_t set); 53void capng_setpid(int pid); 54int capng_get_caps_process(void); 55int capng_update(capng_act_t action, capng_type_t type,unsigned int capability); 56int capng_updatev(capng_act_t action, capng_type_t type, 57 unsigned int capability, ...); 58 59// These functions apply the capabilities previously setup to a process 60int capng_apply(capng_select_t set); 61int capng_lock(void); 62int capng_change_id(int uid, int gid, capng_flags_t flag); 63 64// These functions are used for file based capabilities 65int capng_get_caps_fd(int fd); 66int capng_apply_caps_fd(int fd); 67 68// These functions check capability bits 69capng_results_t capng_have_capabilities(capng_select_t set); 70int capng_have_capability(capng_type_t which, unsigned int capability); 71 72// These functions printout capabilities 73char *capng_print_caps_numeric(capng_print_t where, capng_select_t set); 74char *capng_print_caps_text(capng_print_t where, capng_type_t which); 75 76// These functions convert between numeric and text string 77int capng_name_to_capability(const char *name); 78const char *capng_capability_to_name(unsigned int capability); 79 80// These function should be used when you suspect a third party library 81// may use libcap-ng also and want to make sure it doesn't alter something 82// important. Otherwise you shouldn't need to call these. 83void *capng_save_state(void); 84void capng_restore_state(void **state); 85 86#ifdef __cplusplus 87} 88#endif 89 90 91#endif 92