X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=execute.h;h=cb69bb3bd82c43f8f2b06116b76e69053a5133ed;hp=737973dad90e8fe112e380bd11d4aa27fa1ce4da;hb=61902ea3eb0716227c27caa84d9fb839a0c8b673;hpb=451a074fd589fd90aff91fcf89b2e599b20ae6a0 diff --git a/execute.h b/execute.h index 737973dad..cb69bb3bd 100644 --- a/execute.h +++ b/execute.h @@ -33,11 +33,13 @@ typedef struct ExecContext ExecContext; #include #include +struct CGroupBonding; + #include "list.h" #include "util.h" /* Abstract namespace! */ -#define LOGGER_SOCKET "/org/freedesktop.org/systemd1/logger" +#define LOGGER_SOCKET "/org/freedesktop/systemd1/logger" typedef enum ExecOutput { EXEC_OUTPUT_CONSOLE, @@ -97,7 +99,6 @@ struct ExecContext { int syslog_priority; char *syslog_identifier; - /* FIXME: all privs related settings need to be enforced */ cap_t capabilities; int secure_bits; uint64_t capability_bounding_set_drop; @@ -137,16 +138,26 @@ typedef enum ExitStatus { EXIT_SIGNAL_MASK, EXIT_INPUT, EXIT_OUTPUT, - EXIT_CHROOT, + EXIT_CHROOT, /* 210 */ EXIT_PGID, EXIT_IOPRIO, EXIT_TIMERSLACK, EXIT_SECUREBITS, EXIT_SETSCHEDULER, - EXIT_CPUAFFINITY + EXIT_CPUAFFINITY, + EXIT_GROUP, + EXIT_USER, + EXIT_CAPABILITIES, + EXIT_CGROUP } ExitStatus; -int exec_spawn(const ExecCommand *command, const ExecContext *context, int *fds, unsigned n_fds, pid_t *ret); +int exec_spawn(const ExecCommand *command, + const ExecContext *context, + int *fds, unsigned n_fds, + bool apply_permissions, + bool apply_chroot, + struct CGroupBonding *cgroup_bondings, + pid_t *ret); void exec_command_free_list(ExecCommand *c); void exec_command_free_array(ExecCommand **c, unsigned n); @@ -154,6 +165,7 @@ void exec_command_free_array(ExecCommand **c, unsigned n); char *exec_command_line(ExecCommand *c); void exec_command_dump(ExecCommand *c, FILE *f, const char *prefix); void exec_command_dump_list(ExecCommand *c, FILE *f, const char *prefix); +void exec_command_append_list(ExecCommand **l, ExecCommand *e); void exec_context_init(ExecContext *c); void exec_context_done(ExecContext *c);