/builddir/build/BUILD/libutil++-1.4.0/src/sella/util/Privilege.h

/*
** libutil++
** $Id: Privilege.h 1197 2014-10-14 22:26:11Z sella $
** Copyright (c) 2011-2014 Digital Genesis, LLC. All Rights Reserved.
** Released under the LGPL Version 2.1 License.
** http://www.digitalgenesis.com
*/

#ifndef __libutilxx__sella__util__Privilege_H__
#define __libutilxx__sella__util__Privilege_H__

#include "../../common.h"
#include "PrivilegeException.h"

#include <unistd.h>
#include <sys/types.h>
#include <cap-ng.h>

#include <string>
#include <memory>

namespace sella {
        namespace util {
                class Privilege;
        }
}

class sella::util::Privilege {
        public:
                typedef std::shared_ptr<Privilege> shared;
                typedef Privilege *ptr;

        public:
                Privilege() throw ();
                Privilege(const Privilege &other);
                virtual ~Privilege();

                Privilege& operator=(const Privilege &other) throw ();
                bool operator==(const Privilege &other) const throw () = delete;
                bool operator!=(const Privilege &other) const throw () = delete;

                /* Portable User/Group API. */
                void applyIdentity(void) const throw (PrivilegeException);
                void applyEffectiveIdentity(void) const throw (PrivilegeException);
                void restoreIdentity(void) const throw (PrivilegeException);
                void restoreEffectiveIdentity(void) const throw (PrivilegeException);

                void setUID(uid_t &uid, bool setGID = true) throw (PrivilegeException);
                void setUID(const std::string &user, bool setGID = true) throw (PrivilegeException);
                void setGID(gid_t &gid) throw ();
                void setGID(const std::string &group) throw (PrivilegeException);

                const uid_t& getUID(void) const throw ();
                const uid_t getCurrentUID(void) const throw ();
                const uid_t getEffectiveUID(void) const throw ();
                const uid_t& getOriginalUID(void) const throw ();
                const gid_t& getGID(void) const throw ();
                const gid_t getCurrentGID(void) const throw ();
                const gid_t getEffectiveGID(void) const throw ();
                const gid_t& getOriginalGID(void) const throw ();

                bool isRoot(void) const throw (); /* Is Currently Root */
                bool isRootGroup(void) const throw (); /* Is Currently Root Group */
                bool wasRoot(void) const throw (); /* Was Originally Root */
                bool wasRootGroup(void) const throw (); /* Was Originally Root Group */

                void clear(void) throw ();

#ifdef HAVE_LINUX_CAPABILITY_H
                /* Linux Only Capabilities API - See man 7 capabilities */
                void applyCapabilities(void) throw (PrivilegeException);

                void setAll(void) throw ();
                bool setCapability(int capability) throw ();
                bool setChown(void) throw ();
                bool setKill(void) throw ();
                bool setNetBindService(void) throw ();
                bool setNetRaw(void) throw ();
                bool setSetUID(void) throw ();
                bool setSysChroot(void) throw ();
                bool setSysNice(void) throw ();
                bool setSysRawIO(void) throw ();
                bool setSysResource(void) throw ();

                void clearAll(void) throw ();
                bool clearCapability(int capability) throw ();
                bool clearChown(void) throw ();
                bool clearKill(void) throw ();
                bool clearNetBindService(void) throw ();
                bool clearNetRaw(void) throw ();
                bool clearSetUID(void) throw ();
                bool clearSysChroot(void) throw ();
                bool clearSysNice(void) throw ();
                bool clearSysRawIO(void) throw ();
                bool clearSysResource(void) throw ();

                bool hasNone(void) const throw ();
                bool hasCapability(int capability) const throw ();
                bool hasChown(void) const throw ();
                bool hasKill(void) const throw ();
                bool hasNetBindService(void) const throw ();
                bool hasNetRaw(void) const throw ();
                bool hasSetUID(void) const throw ();
                bool hasSysChroot(void) const throw ();
                bool hasSysNice(void) const throw ();
                bool hasSysRawIO(void) const throw ();
                bool hasSysResource(void) const throw ();
#endif

                static const Privilege::shared shared_ptr(void) throw ();

        private:
                uid_t ouid, uid;
                gid_t ogid, gid;
};

#endif

/*
** vim: noet ts=3 sw=3
*/

---