view src/lib/restrict-access.h @ 1506:e7c627bacaaf HEAD

Allow first_valid_gid to be 0. Drop any supplementary groups not in valid gid range.
author Timo Sirainen <tss@iki.fi>
date Mon, 26 May 2003 18:26:29 +0300
parents 0ca6dfe196f1
children 8690d2000e33
line wrap: on
line source

#ifndef __RESTRICT_ACCESS_H
#define __RESTRICT_ACCESS_H

/* set environment variables so they can be read with
   restrict_access_by_env() */
void restrict_access_set_env(const char *user, uid_t uid, gid_t gid,
			     const char *chroot_dir,
			     gid_t first_valid_gid, gid_t last_valid_gid);

/* chroot, setuid() and setgid() based on environment variables.
   If disallow_roots is TRUE, we'll kill ourself if we didn't have the
   environment settings and we have root uid or gid. */
void restrict_access_by_env(int disallow_root);

#endif