blob: 270ecdf2333b7665d7543b62f0e5bb74212f0841 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
;;; Consfigurator -- Lisp declarative configuration management system
;;; Copyright (C) 2021 Sean Whitton <spwhitton@spwhitton.name>
;;; This file is free software; you can redistribute it and/or modify
;;; it under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3, or (at your option)
;;; any later version.
;;; This file is distributed in the hope that it will be useful,
;;; but WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
;;; GNU General Public License for more details.
;;; You should have received a copy of the GNU General Public License
;;; along with this program. If not, see <http://www.gnu.org/licenses/>.
(in-package :consfigurator.util.posix1e)
(named-readtables:in-readtable :consfigurator)
;;;; POSIX ACLs
(define-foreign-library libacl (t (:default "libacl")))
(use-foreign-library libacl)
(define-error-retval-cfun () "acl_free" :int (obj_p :pointer))
(define-error-retval-cfun (:failure-val (null-pointer))
"acl_get_file" :pointer (path-p :string) (type acl_type_t))
(define-error-retval-cfun ()
"acl_set_file" :int (path-p :string) (type acl_type_t) (acl :pointer))
(define-error-retval-cfun ()
"acl_get_entry" :int (acl :pointer) (entry-id :int) (entry-p :pointer))
(define-error-retval-cfun ()
("acl_get_tag_type" %acl-get-tag-type)
:int (entry-d acl_entry_t) (tag-type-p :pointer))
(defun acl-get-tag-type (entry-d)
(with-foreign-object (tag-type-p 'acl_tag_t)
(%acl-get-tag-type entry-d tag-type-p)
(mem-ref tag-type-p 'acl_tag_t)))
(defmacro with-acl-free (((aclvar aclcall)) &body forms)
(with-gensyms (aclvar*)
`(let* ((,aclvar ,aclcall)
(,aclvar* (make-pointer (pointer-address ,aclvar))))
(unwind-protect (progn ,@forms) (acl-free ,aclvar*)))))
(define-error-retval-cfun (:failure-val (null-pointer))
("acl_get_qualifier" %acl-get-qualifier) :pointer (entry-d acl_entry_t))
(define-error-retval-cfun ()
"acl_set_qualifier" :int (entry-d acl_entry_t) (qualifier-p :pointer))
(defun acl-get-qualifier (entry-d type)
(with-acl-free ((qualifier-p (%acl-get-qualifier entry-d)))
(mem-ref qualifier-p type)))
;;;; Capabilities
(define-foreign-library libcap (:linux (:default "libcap")))
(use-foreign-library libcap)
(define-error-retval-cfun () "cap_free" :int (obj_d :pointer))
(define-error-retval-cfun (:failure-val (null-pointer))
"cap_get_proc" :pointer)
(define-error-retval-cfun ()
"cap_get_flag" :int
(cap-p :pointer) (cap cap_value_t) (flag cap_flag_t) (value-p :pointer))
(defun posix-capability-p (set &rest capabilities)
"Does the current thread have each of CAPABILITIES in SET?"
(let ((cap-opaque (cap-get-proc)))
(unwind-protect
(with-foreign-object (value-p 'cap_flag_value_t)
(loop for capability in capabilities
do (cap-get-flag cap-opaque capability set value-p)
always (eql :cap-set (mem-ref value-p 'cap_flag_value_t))))
(cap-free cap-opaque))))
|
