X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=src%2Fshared%2Fcapability.h;h=8260ae1a810d050d7dbd9305d3a60b17b3081bb3;hb=01c94c5d0aff09b4c0e429d483c8eeba40017071;hp=9f9c49cf5b5c2566dfa4980d998b76198cebfa28;hpb=5430f7f2bc7330f3088b894166bf3524a067e3d8;p=elogind.git
diff --git a/src/shared/capability.h b/src/shared/capability.h
index 9f9c49cf5..8260ae1a8 100644
--- a/src/shared/capability.h
+++ b/src/shared/capability.h
@@ -1,7 +1,6 @@
/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
-#ifndef foocapabilityhfoo
-#define foocapabilityhfoo
+#pragma once
/***
This file is part of systemd.
@@ -22,6 +21,25 @@
along with systemd; If not, see .
***/
+#include
+#include
+
+#include "util.h"
+
unsigned long cap_last_cap(void);
int have_effective_cap(int value);
-#endif
+int capability_bounding_set_drop(uint64_t drop, bool right_now);
+int capability_bounding_set_drop_usermode(uint64_t drop);
+
+int drop_privileges(uid_t uid, gid_t gid, uint64_t keep_capabilites);
+
+int drop_capability(cap_value_t cv);
+
+DEFINE_TRIVIAL_CLEANUP_FUNC(cap_t, cap_free);
+#define _cleanup_cap_free_ _cleanup_(cap_freep)
+
+static inline void cap_free_charpp(char **p) {
+ if (*p)
+ cap_free(*p);
+}
+#define _cleanup_cap_free_charp_ _cleanup_(cap_free_charpp)