3 * Copyright (C) 2003 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License as published by
7 * the Free Software Foundation; either version 2, or (at your option)
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
15 * You should have received a copy of the GNU General Public License
16 * along with this program; if not, write to the Free Software
17 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
20 #ifndef H_VSERVER_SYSCALL_H
21 #define H_VSERVER_SYSCALL_H
25 #include <sys/types.h>
27 /** the value which is returned in error-case (no ctx found) */
28 #define VC_NOCTX ((ctx_t)(-1))
29 /** the value which means a random (the next free) ctx */
30 #define VC_RANDCTX ((ctx_t)(-1))
31 /** the value which means the current ctx */
32 #define VC_SAMECTX ((ctx_t)(-2))
34 #define VC_LIM_INFINITY (~0ULL)
35 #define VC_LIM_KEEP (~1ULL)
41 struct vc_ip_mask_pair {
46 /** Returns version of the given API-category */
47 int vc_get_version(int category);
49 /** Puts current process into context <ctx>, removes the given caps and
51 * Special values for ctx are
52 * - -2 which means the current context (just for changing caps and flags)
53 * - -1 which means the next free context; this value can be used by
54 * ordinary users also */
55 int vc_new_s_context(ctx_t ctx, unsigned int remove_cap, unsigned int flags);
57 /** Sets the ipv4root information.
58 * \precondition: nb<16 */
59 int vc_set_ipv4root(uint32_t bcast, size_t nb, struct vc_ip_mask_pair const *ips);
61 int vc_chrootsafe(char const *dir);
64 /* rlimit related functions */
65 typedef uint64_t vc_limit_t;
75 struct vc_rlimit_mask {
81 int vc_get_rlimit(ctx_t ctx, int resource, struct vc_rlimit *lim);
82 int vc_set_rlimit(ctx_t ctx, int resource, struct vc_rlimit const *lim);
83 int vc_get_rlimit_mask(ctx_t ctx, struct vc_rlimit_mask *lim);
85 /** Returns the context of the given process. pid==0 means the current process. */
86 ctx_t vc_X_getctx(pid_t pid);