mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-08-07 23:56:57 +02:00
bfe0f9d02d
Let's store progname in the global variable, as it is handy to use it in different parts of code to format messages sent to stdout. This reduces the number of arguments, which we should pass to some functions.
28 lines
1.0 KiB
C
28 lines
1.0 KiB
C
#ifndef _HAPROXY_LINUXCAP_H
|
|
#define _HAPROXY_LINUXCAP_H
|
|
#include <syscall.h>
|
|
#include <linux/capability.h>
|
|
|
|
#define CAPS_TO_ULLONG(low, high) (((ullong)high << 32) | (ullong)low)
|
|
|
|
/* for haproxy process itself, allocate this 8 byte-size struct only once in
|
|
* .data and makes it accessible from other compile-units, because we always
|
|
* fill it with the same values and because we could use it to collect
|
|
* capabilities for post_mortem debug info.
|
|
*/
|
|
extern struct __user_cap_header_struct cap_hdr_haproxy;
|
|
|
|
/* provided by sys/capability.h on some distros, declared here, as could be used
|
|
* in debug.c, in order to collect info about process capabilities before
|
|
* applying its configuration and at runtime.
|
|
*/
|
|
static inline int capget(cap_user_header_t hdrp, const cap_user_data_t datap)
|
|
{
|
|
return syscall(SYS_capget, hdrp, datap);
|
|
}
|
|
int prepare_caps_for_setuid(int from_uid, int to_uid);
|
|
int finalize_caps_after_setuid(int from_uid, int to_uid);
|
|
int prepare_caps_from_permitted_set(int from_uid, int to_uid);
|
|
|
|
#endif /* _HAPROXY_LINUXCAP_H */
|