cap

Dec 12, 2021

Changes in this version

type Mode

+ const ModeHybrid

Oct 23, 2021

Changes in this version

type IAB

+ func (iab *IAB) Dup() (*IAB, error)

type Set

+ func (c *Set) FillFlag(to Flag, ref *Set, from Flag) error

Aug 30, 2021

Changes in this version

+ func ProcRoot(path string) string

Aug 26, 2021

Changes in this version

+ type Diff uint

+ func (cf Diff) Has(vec Flag) bool

type IAB

+ func IABGetPID(pid int) (*IAB, error)

+ func NewIAB() *IAB

+ func (iab *IAB) Cf(alt *IAB) (IABDiff, error)

+ type IABDiff uint

+ func (d IABDiff) Has(v Vector) bool

type Set

+ func (c *Set) Cf(d *Set) (Diff, error)

Jun 20, 2021

Changes in this version

+ var ErrOutOfRange = errors.New("flag length invalid for export")

+ var MinExtFlagSize = uint(8)

type Set

+ func (c *Set) Fill(to, from Flag) error

Mar 14, 2021

Changes in this version

+ func Prctl(prVal uintptr, args ...uintptr) (int, error)

+ func Prctlw(prVal uintptr, args ...uintptr) (int, error)

type Launcher

+ func FuncLauncher(fn func(interface{}) error) *Launcher

Aug 15, 2020

Changes in this version

type Value

+ const CHECKPOINT_RESTORE

Jul 25, 2020

Changes in this version

type Flag

+ func (f Flag) String() string

type Set

+ func (c *Set) SetNSOwner(uid int)

type Vector

+ func (v Vector) String() string

Jul 4, 2020

Changes in this version

+ const ExtMagic

+ const LaunchSupported

+ const NamedCount

+ var ErrAmbiguousAmbient = errors.New("use Launcher for ambient caps")

+ var ErrAmbiguousChroot = errors.New("use Launcher for chroot")

+ var ErrAmbiguousIDs = errors.New("use Launcher for uids and gids")

+ var ErrBadMagic = errors.New("unsupported magic")

+ var ErrBadMode = errors.New("unsupported mode")

+ var ErrBadPath = errors.New("file is not a regular executable")

+ var ErrBadSet = errors.New("bad capability set")

+ var ErrBadSize = errors.New("filecap bad size")

+ var ErrBadText = errors.New("bad text")

+ var ErrBadValue = errors.New("bad capability value")

+ var ErrLaunchFailed = errors.New("launch failed")

+ var ErrNoLaunch = errors.New("launch not supported")

+ func Differs(cf uint, vec Flag) bool

+ func DropBound(val ...Value) error

+ func GetAmbient(val Value) (bool, error)

+ func GetBound(val Value) (bool, error)

+ func ResetAmbient() error

+ func SetAmbient(enable bool, val ...Value) error

+ func SetGroups(gid int, suppl ...int) error

+ func SetUID(uid int) error

+ type Flag uint

+ const Effective

+ const Inheritable

+ const Permitted

+ type IAB struct

+ func IABFromText(text string) (*IAB, error)

+ func IABGetProc() *IAB

+ func IABInit() *IAB

+ func (iab *IAB) Fill(vec Vector, c *Set, flag Flag) error

+ func (iab *IAB) GetVector(vec Vector, val Value) (bool, error)

+ func (iab *IAB) SetProc() error

+ func (iab *IAB) SetVector(vec Vector, raised bool, vals ...Value) error

+ func (iab *IAB) String() string

+ type Launcher struct

+ func NewLauncher(path string, args []string, env []string) *Launcher

+ func (attr *Launcher) Callback(fn func(*syscall.ProcAttr, interface{}) error)

+ func (attr *Launcher) Launch(data interface{}) (int, error)

+ func (attr *Launcher) SetChroot(root string)

+ func (attr *Launcher) SetGroups(gid int, groups []int)

+ func (attr *Launcher) SetIAB(iab *IAB)

+ func (attr *Launcher) SetMode(mode Mode)

+ func (attr *Launcher) SetUID(uid int)

+ type Mode uint

+ const ModeNoPriv

+ const ModePure1E

+ const ModePure1EInit

+ const ModeUncertain

+ func GetMode() Mode

+ func (m Mode) Set() error

+ func (m Mode) String() string

+ type Secbits uint

+ const SecbitKeepCaps

+ const SecbitKeepCapsLocked

+ const SecbitNoCapAmbientRaise

+ const SecbitNoCapAmbientRaiseLocked

+ const SecbitNoRoot

+ const SecbitNoRootLocked

+ const SecbitNoSetUIDFixup

+ const SecbitNoSetUIDFixupLocked

+ func GetSecbits() Secbits

+ func (s Secbits) Set() error

+ type Set struct

+ func FromText(text string) (*Set, error)

+ func GetFd(file *os.File) (*Set, error)

+ func GetFile(path string) (*Set, error)

+ func GetPID(pid int) (*Set, error)

+ func GetProc() *Set

+ func Import(d []byte) (*Set, error)

+ func NewSet() *Set

+ func (c *Set) Clear() error

+ func (c *Set) ClearFlag(vec Flag) error

+ func (c *Set) Compare(d *Set) (uint, error)

+ func (c *Set) Dup() (*Set, error)

+ func (c *Set) Export() ([]byte, error)

+ func (c *Set) GetFlag(vec Flag, val Value) (bool, error)

+ func (c *Set) GetNSOwner() (int, error)

+ func (c *Set) SetFd(file *os.File) error

+ func (c *Set) SetFile(path string) error

+ func (c *Set) SetFlag(vec Flag, enable bool, val ...Value) error

+ func (c *Set) SetProc() error

+ func (c *Set) String() string

+ type Value uint

+ const AUDIT_CONTROL

+ const AUDIT_READ

+ const AUDIT_WRITE

+ const BLOCK_SUSPEND

+ const BPF

+ const CHOWN

+ const DAC_OVERRIDE

+ const DAC_READ_SEARCH

+ const FOWNER

+ const FSETID

+ const IPC_LOCK

+ const IPC_OWNER

+ const KILL

+ const LEASE

+ const LINUX_IMMUTABLE

+ const MAC_ADMIN

+ const MAC_OVERRIDE

+ const MKNOD

+ const NET_ADMIN

+ const NET_BIND_SERVICE

+ const NET_BROADCAST

+ const NET_RAW

+ const PERFMON

+ const SETFCAP

+ const SETGID

+ const SETPCAP

+ const SETUID

+ const SYSLOG

+ const SYS_ADMIN

+ const SYS_BOOT

+ const SYS_CHROOT

+ const SYS_MODULE

+ const SYS_NICE

+ const SYS_PACCT

+ const SYS_PTRACE

+ const SYS_RAWIO

+ const SYS_RESOURCE

+ const SYS_TIME

+ const SYS_TTY_CONFIG

+ const WAKE_ALARM

+ func FromName(name string) (Value, error)

+ func MaxBits() Value

+ func (v Value) String() string

+ type Vector int

+ const Amb

+ const Bound

+ const Inh