3 // Copyright (C) 2003 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
5 // This program is free software; you can redistribute it and/or modify
6 // it under the terms of the GNU General Public License as published by
7 // the Free Software Foundation; either version 2, or (at your option)
10 // This program is distributed in the hope that it will be useful,
11 // but WITHOUT ANY WARRANTY; without even the implied warranty of
12 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 // GNU General Public License for more details.
15 // You should have received a copy of the GNU General Public License
16 // along with this program; if not, write to the Free Software
17 // Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
19 #ifndef H_VSERVER_SYSCALL_H
20 #define H_VSERVER_SYSCALL_H
24 #include <sys/types.h>
26 #define VC_NOCTX ((ctx_t)(-1))
27 #define VC_LIM_INFINITY (~0ULL)
28 #define VC_LIM_KEEP (~1ULL)
34 struct vc_ip_mask_pair {
39 /** Returns version of the given API-category */
40 int vc_get_version(int category);
42 /** Puts current process into context <ctx>, removes the given caps and
44 * Special values for ctx are
45 * - -2 which means the current context (just for changing caps and flags)
46 * - -1 which means the next free context; this value can be used by
47 * ordinary users also */
48 int vc_new_s_context(ctx_t ctx, unsigned int remove_cap, unsigned int flags);
50 /** Sets the ipv4root information.
51 * \precondition: nb<16 */
52 int vc_set_ipv4root(uint32_t bcast, size_t nb, struct vc_ip_mask_pair const *ips);
54 int vc_chrootsafe(char const *dir);
57 /* rlimit related functions */
58 typedef uint64_t vc_limit_t;
68 struct vc_rlimit_mask {
74 int vc_get_rlimit(ctx_t ctx, int resource, struct vc_rlimit *lim);
75 int vc_set_rlimit(ctx_t ctx, int resource, struct vc_rlimit const *lim);
76 int vc_get_rlimit_mask(ctx_t ctx, struct vc_rlimit_mask *lim);
78 /** Returns the context of the given process. pid==0 means the current process. */
79 ctx_t vc_X_getctx(pid_t pid);