Page MenuHomeFreeBSD
Differential D22993 Diff 66267 lib/libcapsicum/capsicum_helpers.h

Changeset View

Standalone View

View Options

lib/libcapsicum/capsicum_helpers.h

Show First 20 Lines • Show All 42 Lines • ▼ Show 20 Lines
#define CAPH_IGNORE_EBADF 0x0001 #define CAPH_IGNORE_EBADF 0x0001
#define CAPH_READ 0x0002 #define CAPH_READ 0x0002
#define CAPH_WRITE 0x0004 #define CAPH_WRITE 0x0004
#define CAPH_LOOKUP 0x0008 #define CAPH_LOOKUP 0x0008
__BEGIN_DECLS __BEGIN_DECLS
static __inline int static const unsigned long caph_stream_cmds[] =
caph_limit_stream(int fd, int flags) { TIOCGETA, TIOCGWINSZ, FIODTYPE };
static const uint32_t caph_stream_fcntls = CAP_FCNTL_GETFL;
static __inline void
caph_stream_rights(cap_rights_t *rights, int flags)
markjUnsubmitted
Done
Inline Actions

I think the backslash is not needed.

markj: I think the backslash is not needed.
{ {
cap_rights_t rights;
unsigned long cmds[] = { TIOCGETA, TIOCGWINSZ, FIODTYPE };
cap_rights_init(&rights, CAP_EVENT, CAP_FCNTL, CAP_FSTAT, cap_rights_init(rights, CAP_EVENT, CAP_FCNTL, CAP_FSTAT,
CAP_IOCTL, CAP_SEEK); CAP_IOCTL, CAP_SEEK);
if ((flags & CAPH_READ) != 0) if ((flags & CAPH_READ) != 0)
cap_rights_set(&rights, CAP_READ); cap_rights_set(rights, CAP_READ);
if ((flags & CAPH_WRITE) != 0) if ((flags & CAPH_WRITE) != 0)
cap_rights_set(&rights, CAP_WRITE); cap_rights_set(rights, CAP_WRITE);
if ((flags & CAPH_LOOKUP) != 0) if ((flags & CAPH_LOOKUP) != 0)
cap_rights_set(&rights, CAP_LOOKUP); cap_rights_set(rights, CAP_LOOKUP);
}
static __inline int
caph_limit_stream(int fd, int flags)
{
cap_rights_t rights;
caph_stream_rights(&rights, flags);
if (cap_rights_limit(fd, &rights) < 0 && errno != ENOSYS) { if (cap_rights_limit(fd, &rights) < 0 && errno != ENOSYS) {
if (errno == EBADF && (flags & CAPH_IGNORE_EBADF) != 0) if (errno == EBADF && (flags & CAPH_IGNORE_EBADF) != 0)
return (0); return (0);
return (-1); return (-1);
} }
if (cap_ioctls_limit(fd, cmds, nitems(cmds)) < 0 && errno != ENOSYS) if (cap_ioctls_limit(fd, caph_stream_cmds,
nitems(caph_stream_cmds)) < 0 && errno != ENOSYS)
return (-1); return (-1);
if (cap_fcntls_limit(fd, CAP_FCNTL_GETFL) < 0 && errno != ENOSYS) if (cap_fcntls_limit(fd, caph_stream_fcntls) < 0 && errno != ENOSYS)
return (-1); return (-1);
return (0); return (0);
} }
static __inline int static __inline int
caph_limit_stdin(void) caph_limit_stdin(void)
{ {
▲ Show 20 Lines • Show All 94 Lines • Show Last 20 Lines