Return to privs.h CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / quagga / lib

quagga

    1: /* 
    2:  * Zebra privileges header.
    3:  *
    4:  * Copyright (C) 2003 Paul Jakma.
    5:  *
    6:  * This file is part of GNU Zebra.
    7:  *
    8:  * GNU Zebra is free software; you can redistribute it and/or modify it
    9:  * under the terms of the GNU General Public License as published by the
   10:  * Free Software Foundation; either version 2, or (at your option) any
   11:  * later version.
   12:  *
   13:  * GNU Zebra is distributed in the hope that it will be useful, but
   14:  * WITHOUT ANY WARRANTY; without even the implied warranty of
   15:  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
   16:  * General Public License for more details.
   17:  *
   18:  * You should have received a copy of the GNU General Public License
   19:  * along with GNU Zebra; see the file COPYING.  If not, write to the Free
   20:  * Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
   21:  * 02111-1307, USA.  
   22:  */
   23: 
   24: #ifndef _ZEBRA_PRIVS_H
   25: #define _ZEBRA_PRIVS_H
   26: 
   27: /* list of zebra capabilities */
   28: typedef enum 
   29: {
   30:   ZCAP_SETID,
   31:   ZCAP_BIND,
   32:   ZCAP_NET_ADMIN,
   33:   ZCAP_SYS_ADMIN,
   34:   ZCAP_NET_RAW,
   35:   ZCAP_CHROOT,
   36:   ZCAP_NICE,
   37:   ZCAP_PTRACE,
   38:   ZCAP_DAC_OVERRIDE,
   39:   ZCAP_READ_SEARCH,
   40:   ZCAP_FOWNER,
   41:   ZCAP_MAX
   42: } zebra_capabilities_t;
   43: 
   44: typedef enum
   45: {
   46:   ZPRIVS_LOWERED,
   47:   ZPRIVS_RAISED,
   48:   ZPRIVS_UNKNOWN,
   49: } zebra_privs_current_t;
   50: 
   51: typedef enum
   52: {
   53:   ZPRIVS_RAISE,
   54:   ZPRIVS_LOWER,
   55: } zebra_privs_ops_t;
   56: 
   57: struct zebra_privs_t
   58: {
   59:   zebra_capabilities_t *caps_p;       /* caps required for operation */
   60:   zebra_capabilities_t *caps_i;       /* caps to allow inheritance of */
   61:   int cap_num_p;                      /* number of caps in arrays */
   62:   int cap_num_i;                    
   63:   const char *user;                   /* user and group to run as */
   64:   const char *group;
   65:   const char *vty_group;              /* group to chown vty socket to */
   66:   /* methods */
   67:   int 
   68:     (*change) (zebra_privs_ops_t);    /* change privileges, 0 on success */
   69:   zebra_privs_current_t 
   70:     (*current_state) (void);          /* current privilege state */
   71: };
   72: 
   73: struct zprivs_ids_t
   74: {
   75:   /* -1 is undefined */
   76:   uid_t uid_priv;                     /* privileged uid */
   77:   uid_t uid_normal;                   /* normal uid */
   78:   gid_t gid_priv;                     /* privileged uid */
   79:   gid_t gid_normal;                   /* normal uid */
   80:   gid_t gid_vty;                      /* vty gid */
   81: };
   82: 
   83:   /* initialise zebra privileges */
   84: extern void zprivs_init (struct zebra_privs_t *zprivs);
   85:   /* drop all and terminate privileges */ 
   86: extern void zprivs_terminate (struct zebra_privs_t *);
   87:   /* query for runtime uid's and gid's, eg vty needs this */
   88: extern void zprivs_get_ids(struct zprivs_ids_t *);
   89: 
   90: #endif /* _ZEBRA_PRIVS_H */