]>
code.delx.au - pulseaudio/blob - src/daemon/caps.c
4 This file is part of polypaudio.
6 polypaudio is free software; you can redistribute it and/or modify
7 it under the terms of the GNU Lesser General Public License as published
8 by the Free Software Foundation; either version 2 of the License,
9 or (at your option) any later version.
11 polypaudio is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 General Public License for more details.
16 You should have received a copy of the GNU Lesser General Public License
17 along with polypaudio; if not, write to the Free Software
18 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
31 #ifdef HAVE_SYS_CAPABILITY_H
32 #include <sys/capability.h>
35 #include <polypcore/log.h>
39 /* Glibc <= 2.2 has broken unistd.h */
40 #if defined(linux) && (__GLIBC__ <= 2 && __GLIBC_MINOR__ <= 2)
41 int setresgid(gid_t r
, gid_t e
, gid_t s
);
42 int setresuid(uid_t r
, uid_t e
, uid_t s
);
47 /* Drop root rights when called SUID root */
48 void pa_drop_root(void) {
51 if (uid
== 0 || geteuid() != 0)
54 pa_log_info(__FILE__
": dropping root rights.");
56 #if defined(HAVE_SETRESUID)
57 setresuid(uid
, uid
, uid
);
58 #elif defined(HAVE_SETREUID)
68 void pa_drop_root(void) {
73 #ifdef HAVE_SYS_CAPABILITY_H
75 /* Limit capabilities set to CAPSYS_NICE */
76 int pa_limit_caps(void) {
79 cap_value_t nice_cap
= CAP_SYS_NICE
;
86 cap_set_flag(caps
, CAP_EFFECTIVE
, 1, &nice_cap
, CAP_SET
);
87 cap_set_flag(caps
, CAP_PERMITTED
, 1, &nice_cap
, CAP_SET
);
89 if (cap_set_proc(caps
) < 0)
92 pa_log_info(__FILE__
": dropped capabilities successfully.");
102 /* Drop all capabilities, effectively becoming a normal user */
103 int pa_drop_caps(void) {
112 if (cap_set_proc(caps
) < 0) {
113 pa_log(__FILE__
": failed to drop capabilities: %s", strerror(errno
));
127 /* NOOPs in case capabilities are not available. */
128 int pa_limit_caps(void) {
132 int pa_drop_caps(void) {