X-Git-Url: http://git.linux-vserver.org/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=util-vserver%2Flib%2Fvserver.h;h=c4095ef7d277820328ed5012ea48b20d466bb29a;hb=a28869e3a59f5e0401253bc87da9fdf0183a42fd;hp=2d19794c36525f2b96a77d740317e2eba20bc6a4;hpb=06ec2622dde6e41a816e8d3b356cb629590152e7;p=util-vserver.git diff --git a/util-vserver/lib/vserver.h b/util-vserver/lib/vserver.h index 2d19794..c4095ef 100644 --- a/util-vserver/lib/vserver.h +++ b/util-vserver/lib/vserver.h @@ -95,6 +95,19 @@ #define VC_CAP_LEASE 28 #define VC_CAP_QUOTACTL 29 +#define VC_IMMUTABLE_FILE_FL 0x00000010l +#define VC_IMMUTABLE_LINK_FL 0x00008000l +#define VC_IMMUTABLE_ALL (VC_IMMUTABLE_LINK_FL|VC_IMMUTABLE_FILE_FL) + +#define VC_IATTR_XID 0x01000000 + +#define VC_IATTR_ADMIN 0x00000001 +#define VC_IATTR_WATCH 0x00000002 +#define VC_IATTR_HIDE 0x00000004 + +#define VC_IATTR_BARRIER 0x00010000 +#define VC_IATTR_IUNLINK 0x00020000 + #ifdef __cplusplus extern "C" { @@ -105,8 +118,8 @@ extern "C" { uint32_t mask; }; - /** Returns version of the given API-category */ - int vc_get_version(int category); + /** Returns the version of the current kernel API. */ + int vc_get_version(); /** Puts current process into context , removes the given caps and * sets flags. @@ -115,7 +128,7 @@ extern "C" { * - VC_RANDCTX which means the next free context; this value can be used by * ordinary users also * See http://vserver.13thfloor.at/Stuff/Logic.txt for details */ - int vc_new_s_context(xid_t ctx, unsigned int remove_cap, unsigned int flags); + xid_t vc_new_s_context(xid_t ctx, unsigned int remove_cap, unsigned int flags); /** Sets the ipv4root information. * \precondition: nb<16 */ @@ -149,16 +162,70 @@ extern "C" { int vc_ctx_kill(xid_t ctx, pid_t pid, int sig); + + int vc_set_iattr(dev_t dev, ino_t ino, xid_t xid, uint32_t flags, uint32_t mask); + int vc_get_iattr(dev_t dev, ino_t ino, xid_t * /*@null@*/ xid, + uint32_t * /*@null@*/ flags, uint32_t * /*@null@*/ mask); + + int vc_set_iattr_compat(char const *filename, + dev_t dev, ino_t ino, xid_t xid, + uint32_t flags, uint32_t mask, + mode_t const * /*@null@*/ mode); + + int vc_get_iattr_compat(char const *filename, + dev_t dev, ino_t ino, + xid_t * /*@null@*/ xid, + uint32_t * /*@null@*/ flags, + uint32_t * /*@inout@*/ mask, + mode_t const * /*@null@*/ mode); + + struct vc_vx_info { + xid_t xid; + pid_t initpid; + }; + /** Returns the context of the given process. pid==0 means the current process. */ - xid_t vc_X_getctx(pid_t pid); + xid_t vc_get_task_xid(pid_t pid); + int vc_get_vx_info(xid_t xid, struct vc_vx_info *info); - /** Returns the pid of the 'init' process */ - pid_t vc_X_getinitpid(pid_t pid); + typedef enum { vcVHI_CONTEXT, vcVHI_SYSNAME, vcVHI_NODENAME, + vcVHI_RELEASE, vcVHI_VERSION, vcVHI_MACHINE, + vcVHI_DOMAINNAME } vc_uts_type; + + int vc_set_vhi_name(xid_t xid, vc_uts_type type, char const *val, size_t len); + int vc_get_vhi_name(xid_t xid, vc_uts_type type, char *val, size_t len); - int vc_text2cap(char const *); - char const * vc_cap2text(int); + uint32_t vc_textlist2flag(char const *, size_t len, + char const **err_ptr, size_t *err_len); + uint32_t vc_text2flag(char const *, size_t len); + char const * vc_hiflag2text(unsigned int); + + int vc_text2cap(char const *); + char const * vc_cap2text(unsigned int); + + inline static int vc_get_securecaps() { + return ( (1<