0a7888b1fa
Closes #154 Currently this has three functions: one which returns the list of subuid ranges for a user, one returning the subgids, and one which frees the ranges lists. I might be mistaken about what -disable-man means; some of the code suggests it means just don't re-generate them, but not totally ignore them. But that doesn't seem to really work, so let's just ignore man/ when -disable-man. Remove --disable-shared. I'm not sure why it was there, but it stems from long, long ago, and I suspect it comes from some ancient toolchain bug. Create a tests/run_some, a shorter version of run_all. I'll slowly add tests to this as I verify they work, then I can work on fixing the once which don't. Also, don't touch man/ if not -enable-man. Changelog: Apr 22: change the subid list api as recomended by Dan Walsh. Apr 23: implement get_subid_owner Apr 24: implement range add/release Apr 25: finish tests and rebase May 10: make @owner const Signed-off-by: Serge Hallyn <serge@hallyn.com>
49 lines
1.9 KiB
C
49 lines
1.9 KiB
C
/*
|
|
* Copyright (c) 2012- Eric W. Biederman
|
|
*/
|
|
|
|
#ifndef _SUBORDINATEIO_H
|
|
#define _SUBORDINATEIO_H
|
|
|
|
#include <config.h>
|
|
|
|
#ifdef ENABLE_SUBIDS
|
|
|
|
#include <sys/types.h>
|
|
|
|
#include "../libsubid/subid.h"
|
|
|
|
extern int sub_uid_close(void);
|
|
extern bool have_sub_uids(const char *owner, uid_t start, unsigned long count);
|
|
extern bool sub_uid_file_present (void);
|
|
extern bool sub_uid_assigned(const char *owner);
|
|
extern int sub_uid_lock (void);
|
|
extern int sub_uid_setdbname (const char *filename);
|
|
extern /*@observer@*/const char *sub_uid_dbname (void);
|
|
extern int sub_uid_open (int mode);
|
|
extern int sub_uid_unlock (void);
|
|
extern int sub_uid_add (const char *owner, uid_t start, unsigned long count);
|
|
extern int sub_uid_remove (const char *owner, uid_t start, unsigned long count);
|
|
extern uid_t sub_uid_find_free_range(uid_t min, uid_t max, unsigned long count);
|
|
extern struct subordinate_range **list_owner_ranges(const char *owner, enum subid_type id_type);
|
|
extern bool new_subid_range(struct subordinate_range *range, enum subid_type id_type, bool reuse);
|
|
extern bool release_subid_range(struct subordinate_range *range, enum subid_type id_type);
|
|
extern int find_subid_owners(unsigned long id, uid_t **uids, enum subid_type id_type);
|
|
extern void free_subordinate_ranges(struct subordinate_range **ranges);
|
|
|
|
extern int sub_gid_close(void);
|
|
extern bool have_sub_gids(const char *owner, gid_t start, unsigned long count);
|
|
extern bool sub_gid_file_present (void);
|
|
extern bool sub_gid_assigned(const char *owner);
|
|
extern int sub_gid_lock (void);
|
|
extern int sub_gid_setdbname (const char *filename);
|
|
extern /*@observer@*/const char *sub_gid_dbname (void);
|
|
extern int sub_gid_open (int mode);
|
|
extern int sub_gid_unlock (void);
|
|
extern int sub_gid_add (const char *owner, gid_t start, unsigned long count);
|
|
extern int sub_gid_remove (const char *owner, gid_t start, unsigned long count);
|
|
extern uid_t sub_gid_find_free_range(gid_t min, gid_t max, unsigned long count);
|
|
#endif /* ENABLE_SUBIDS */
|
|
|
|
#endif
|