aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/utils/capabilities.h
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2013-05-08 17:14:29 +0200
committerTobias Brunner <tobias@strongswan.org>2013-06-25 17:16:32 +0200
commit2e21bac19aebd661b70ddb9741fa86e205e89e59 (patch)
tree4136baac843eb8ff545e8dd642fc16e856be1f5e /src/libstrongswan/utils/capabilities.h
parenta65024264379bacc2733282f2b59b8c14e3897c0 (diff)
downloadstrongswan-2e21bac19aebd661b70ddb9741fa86e205e89e59.tar.bz2
strongswan-2e21bac19aebd661b70ddb9741fa86e205e89e59.tar.xz
capabilities: Ensure required capabilities are actually held by the process/user
Diffstat (limited to 'src/libstrongswan/utils/capabilities.h')
-rw-r--r--src/libstrongswan/utils/capabilities.h9
1 files changed, 7 insertions, 2 deletions
diff --git a/src/libstrongswan/utils/capabilities.h b/src/libstrongswan/utils/capabilities.h
index cd23cbf10..3de11bc6c 100644
--- a/src/libstrongswan/utils/capabilities.h
+++ b/src/libstrongswan/utils/capabilities.h
@@ -1,4 +1,6 @@
/*
+ * Copyright (C) 2013 Tobias Brunner
+ * Hochschule fuer Technik Rapperswil
* Copyright (C) 2012 Martin Willi
* Copyright (C) 2012 revosec AG
*
@@ -36,11 +38,14 @@ typedef struct capabilities_t capabilities_t;
struct capabilities_t {
/**
- * Register a capability to keep while calling drop().
+ * Register a capability to keep while calling drop(). Verifies that the
+ * capability is currently held.
*
* @param cap capability to keep
+ * @return FALSE if the capability is currently not held
*/
- void (*keep)(capabilities_t *this, u_int cap);
+ bool (*keep)(capabilities_t *this,
+ u_int cap) __attribute__((warn_unused_result));
/**
* Get the user ID set through set_uid/resolve_uid.