#ifndef H_VSERVER_SYSCALL_H
#define H_VSERVER_SYSCALL_H
+#include <stdint.h>
+#include <stdlib.h>
+#include <sys/types.h>
+
+#define VC_NOCTX ((ctx_t)(-1))
+#define VC_LIM_INFINITY (~0ULL)
+#define VC_LIM_KEEP (~1ULL)
+
#ifdef __cplusplus
extern "C" {
#endif
-int call_new_s_context(int nbctx, int ctxs[], int remove_cap, int flags);
-int call_set_ipv4root (unsigned long ip[], int nb,
- unsigned long bcast, unsigned long mask[]);
-int call_chrootsafe (const char *dir);
-int has_chrootsafe();
-int call_set_ctxlimit (int res, long limit);
+ struct vc_ip_mask_pair {
+ uint32_t ip;
+ uint32_t mask;
+ };
+
+ /** Returns version of the given API-category */
+ int vc_get_version(int category);
+
+ /** Puts current process into context <ctx>, removes the given caps and
+ * sets flags.
+ * Special values for ctx are
+ * - -2 which means the current context (just for changing caps and flags)
+ * - -1 which means the next free context; this value can be used by
+ * ordinary users also */
+ int vc_new_s_context(ctx_t ctx, unsigned int remove_cap, unsigned int flags);
+
+ /** Sets the ipv4root information.
+ * \precondition: nb<16 */
+ int vc_set_ipv4root(uint32_t bcast, size_t nb, struct vc_ip_mask_pair const *ips);
+
+ int vc_chrootsafe(char const *dir);
+
+
+ /* rlimit related functions */
+ typedef uint64_t vc_limit_t;
+
+
+ struct vc_rlimit
+ {
+ vc_limit_t min;
+ vc_limit_t soft;
+ vc_limit_t hard;
+ };
-void vserver_init();
+ struct vc_rlimit_mask {
+ uint32_t min;
+ uint32_t soft;
+ uint32_t hard;
+ };
+ int vc_get_rlimit(ctx_t ctx, int resource, struct vc_rlimit *lim);
+ int vc_set_rlimit(ctx_t ctx, int resource, struct vc_rlimit const *lim);
+ int vc_get_rlimit_mask(ctx_t ctx, struct vc_rlimit_mask *lim);
+
+ /** Returns the context of the given process. pid==0 means the current process. */
+ ctx_t vc_X_getctx(pid_t pid);
+
#ifdef __cplusplus
}
#endif