]>
Commit | Line | Data |
---|---|---|
03467c88 | 1 | /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/ |
15ae422b | 2 | |
c2f1db8f | 3 | #pragma once |
15ae422b LP |
4 | |
5 | /*** | |
6 | This file is part of systemd. | |
7 | ||
8 | Copyright 2010 Lennart Poettering | |
9 | ||
10 | systemd is free software; you can redistribute it and/or modify it | |
5430f7f2 LP |
11 | under the terms of the GNU Lesser General Public License as published by |
12 | the Free Software Foundation; either version 2.1 of the License, or | |
15ae422b LP |
13 | (at your option) any later version. |
14 | ||
15 | systemd is distributed in the hope that it will be useful, but | |
16 | WITHOUT ANY WARRANTY; without even the implied warranty of | |
17 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
5430f7f2 | 18 | Lesser General Public License for more details. |
15ae422b | 19 | |
5430f7f2 | 20 | You should have received a copy of the GNU Lesser General Public License |
15ae422b LP |
21 | along with systemd; If not, see <http://www.gnu.org/licenses/>. |
22 | ***/ | |
23 | ||
24 | #include <stdbool.h> | |
25 | ||
417116f2 LP |
26 | #include "macro.h" |
27 | ||
1b8689f9 LP |
28 | typedef enum ProtectHome { |
29 | PROTECT_HOME_NO, | |
30 | PROTECT_HOME_YES, | |
31 | PROTECT_HOME_READ_ONLY, | |
32 | _PROTECT_HOME_MAX, | |
33 | _PROTECT_HOME_INVALID = -1 | |
34 | } ProtectHome; | |
35 | ||
36 | typedef enum ProtectSystem { | |
37 | PROTECT_SYSTEM_NO, | |
38 | PROTECT_SYSTEM_YES, | |
39 | PROTECT_SYSTEM_FULL, | |
40 | _PROTECT_SYSTEM_MAX, | |
41 | _PROTECT_SYSTEM_INVALID = -1 | |
42 | } ProtectSystem; | |
417116f2 | 43 | |
c17ec25e MS |
44 | int setup_namespace(char **read_write_dirs, |
45 | char **read_only_dirs, | |
46 | char **inaccessible_dirs, | |
47 | char *tmp_dir, | |
48 | char *var_tmp_dir, | |
a610cc4f | 49 | char *endpoint_path, |
7f112f50 | 50 | bool private_dev, |
1b8689f9 LP |
51 | ProtectHome protect_home, |
52 | ProtectSystem protect_system, | |
c17ec25e | 53 | unsigned mount_flags); |
613b411c LP |
54 | |
55 | int setup_tmp_dirs(const char *id, | |
56 | char **tmp_dir, | |
57 | char **var_tmp_dir); | |
58 | ||
59 | int setup_netns(int netns_storage_socket[2]); | |
417116f2 | 60 | |
1b8689f9 LP |
61 | const char* protect_home_to_string(ProtectHome p) _const_; |
62 | ProtectHome protect_home_from_string(const char *s) _pure_; | |
63 | ||
64 | const char* protect_system_to_string(ProtectSystem p) _const_; | |
65 | ProtectSystem protect_system_from_string(const char *s) _pure_; |