1// Copyright (C) 2016 The Android Open Source Project 2// 3// Licensed under the Apache License, Version 2.0 (the "License"); 4// you may not use this file except in compliance with the License. 5// You may obtain a copy of the License at 6// 7// http://www.apache.org/licenses/LICENSE-2.0 8// 9// Unless required by applicable law or agreed to in writing, software 10// distributed under the License is distributed on an "AS IS" BASIS, 11// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12// See the License for the specific language governing permissions and 13// limitations under the License. 14 15#ifndef _INIT_CAPABILITIES_H 16#define _INIT_CAPABILITIES_H 17 18#include <sys/capability.h> 19 20#include <bitset> 21#include <string> 22#include <type_traits> 23 24#if !defined(__ANDROID__) 25#ifndef CAP_BLOCK_SUSPEND 26#define CAP_BLOCK_SUSPEND 36 27#endif 28#ifndef CAP_AUDIT_READ 29#define CAP_AUDIT_READ 37 30#endif 31#undef CAP_LAST_CAP 32#define CAP_LAST_CAP CAP_AUDIT_READ 33#endif 34 35namespace android { 36namespace init { 37 38struct CapDeleter { 39 void operator()(cap_t caps) const { cap_free(caps); } 40}; 41 42using CapSet = std::bitset<CAP_LAST_CAP + 1>; 43using ScopedCaps = std::unique_ptr<std::remove_pointer<cap_t>::type, CapDeleter>; 44 45int LookupCap(const std::string& cap_name); 46bool CapAmbientSupported(); 47unsigned int GetLastValidCap(); 48bool SetCapsForExec(const CapSet& to_keep); 49bool DropInheritableCaps(); 50 51} // namespace init 52} // namespace android 53 54#endif // _INIT_CAPABILITIES_H 55