diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2013-05-08 17:14:29 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2013-06-25 17:16:32 +0200 |
| commit | 2e21bac19aebd661b70ddb9741fa86e205e89e59 (patch) | |
| tree | 4136baac843eb8ff545e8dd642fc16e856be1f5e /src/libstrongswan/utils/capabilities.h | |
| parent | a65024264379bacc2733282f2b59b8c14e3897c0 (diff) | |
| download | strongswan-2e21bac19aebd661b70ddb9741fa86e205e89e59.tar.bz2 strongswan-2e21bac19aebd661b70ddb9741fa86e205e89e59.tar.xz | |
capabilities: Ensure required capabilities are actually held by the process/user
Diffstat (limited to 'src/libstrongswan/utils/capabilities.h')
| -rw-r--r-- | src/libstrongswan/utils/capabilities.h | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/src/libstrongswan/utils/capabilities.h b/src/libstrongswan/utils/capabilities.h index cd23cbf10..3de11bc6c 100644 --- a/src/libstrongswan/utils/capabilities.h +++ b/src/libstrongswan/utils/capabilities.h @@ -1,4 +1,6 @@ /* + * Copyright (C) 2013 Tobias Brunner + * Hochschule fuer Technik Rapperswil * Copyright (C) 2012 Martin Willi * Copyright (C) 2012 revosec AG * @@ -36,11 +38,14 @@ typedef struct capabilities_t capabilities_t; struct capabilities_t { /** - * Register a capability to keep while calling drop(). + * Register a capability to keep while calling drop(). Verifies that the + * capability is currently held. * * @param cap capability to keep + * @return FALSE if the capability is currently not held */ - void (*keep)(capabilities_t *this, u_int cap); + bool (*keep)(capabilities_t *this, + u_int cap) __attribute__((warn_unused_result)); /** * Get the user ID set through set_uid/resolve_uid. |