X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=src%2Fshared%2Fcapability.h;h=4eb5c2a835d60c55a4395682943e546e86e6593f;hb=ce5792dac67c5ae5656f1f9665b777d44af4cb35;hp=59469e56cbc14ccb477b07618e51954898b976ad;hpb=05d3a176239c1dd67863c70a5b79d9bc14144ef6;p=elogind.git

diff --git a/src/shared/capability.h b/src/shared/capability.h
index 59469e56c..4eb5c2a83 100644
--- a/src/shared/capability.h
+++ b/src/shared/capability.h
@@ -21,10 +21,25 @@
   along with systemd; If not, see <http://www.gnu.org/licenses/>.
 ***/
 
-#include <inttypes.h>
 #include <stdbool.h>
+#include <sys/capability.h>
+
+#include "util.h"
 
 unsigned long cap_last_cap(void);
 int have_effective_cap(int value);
 int capability_bounding_set_drop(uint64_t drop, bool right_now);
 int capability_bounding_set_drop_usermode(uint64_t drop);
+
+int drop_privileges(uid_t uid, gid_t gid, uint64_t keep_capabilities);
+
+int drop_capability(cap_value_t cv);
+
+DEFINE_TRIVIAL_CLEANUP_FUNC(cap_t, cap_free);
+#define _cleanup_cap_free_ _cleanup_(cap_freep)
+
+static inline void cap_free_charpp(char **p) {
+        if (*p)
+                cap_free(*p);
+}
+#define _cleanup_cap_free_charp_ _cleanup_(cap_free_charpp)