#include <stdint.h>
#include <stdlib.h>
+#include <sys/types.h>
+
+#define VC_NOCTX ((ctx_t)(-1))
+#define VC_LIM_INFINITY (~0ULL)
+#define VC_LIM_KEEP (~1ULL)
#ifdef __cplusplus
extern "C" {
uint32_t mask;
};
+ /** Returns version of the given API-category */
+ int vc_get_version(int category);
+
+ /** Puts current process into context <ctx>, removes the given caps and
+ * sets flags.
+ * Special values for ctx are
+ * - -2 which means the current context (just for changing caps and flags)
+ * - -1 which means the next free context; this value can be used by
+ * ordinary users also */
int vc_new_s_context(ctx_t ctx, unsigned int remove_cap, unsigned int flags);
+
+ /** Sets the ipv4root information.
+ * \precondition: nb<16 */
int vc_set_ipv4root(uint32_t bcast, size_t nb, struct vc_ip_mask_pair const *ips);
+
int vc_chrootsafe(char const *dir);
+
+ /* rlimit related functions */
+ typedef uint64_t vc_limit_t;
+
+
+ struct vc_rlimit
+ {
+ vc_limit_t min;
+ vc_limit_t soft;
+ vc_limit_t hard;
+ };
+
+ struct vc_rlimit_mask {
+ uint32_t min;
+ uint32_t soft;
+ uint32_t hard;
+ };
+
+ int vc_get_rlimit(ctx_t ctx, int resource, struct vc_rlimit *lim);
+ int vc_set_rlimit(ctx_t ctx, int resource, struct vc_rlimit const *lim);
+ int vc_get_rlimit_mask(ctx_t ctx, struct vc_rlimit_mask *lim);
+
+ /** Returns the context of the given process. pid==0 means the current process. */
+ ctx_t vc_X_getctx(pid_t pid);
+
#ifdef __cplusplus
}
#endif