mirror of
https://github.com/bol-van/zapret.git
synced 2026-03-08 06:15:26 +00:00
118 lines
2.3 KiB
C
118 lines
2.3 KiB
C
#pragma once
|
|
|
|
#include "params.h"
|
|
|
|
#include <sys/types.h>
|
|
#include <stdbool.h>
|
|
|
|
#ifdef __linux__
|
|
|
|
#include <stddef.h>
|
|
#include <sys/capability.h>
|
|
#include <linux/audit.h>
|
|
|
|
bool checkpcap(uint64_t caps);
|
|
bool setpcap(uint64_t caps);
|
|
int getmaxcap(void);
|
|
bool dropcaps(void);
|
|
|
|
#define syscall_nr (offsetof(struct seccomp_data, nr))
|
|
#define arch_nr (offsetof(struct seccomp_data, arch))
|
|
#define syscall_arg(x) (offsetof(struct seccomp_data, args[x]))
|
|
|
|
#ifndef __AUDIT_ARCH_64BIT
|
|
#define __AUDIT_ARCH_64BIT 0x80000000
|
|
#endif
|
|
#ifndef __AUDIT_ARCH_LE
|
|
#define __AUDIT_ARCH_LE 0x40000000
|
|
#endif
|
|
#ifndef EM_RISCV
|
|
#define EM_RISCV 243
|
|
#endif
|
|
#ifndef AUDIT_ARCH_RISCV64
|
|
#define AUDIT_ARCH_RISCV64 (EM_RISCV | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE)
|
|
#endif
|
|
#ifndef EM_LOONGARCH
|
|
#define EM_LOONGARCH 258
|
|
#endif
|
|
#ifndef AUDIT_ARCH_LOONGARCH64
|
|
#define AUDIT_ARCH_LOONGARCH64 (EM_LOONGARCH | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE)
|
|
#endif
|
|
|
|
#if defined(__aarch64__)
|
|
|
|
# define ARCH_NR AUDIT_ARCH_AARCH64
|
|
|
|
#elif defined(__amd64__)
|
|
|
|
# define ARCH_NR AUDIT_ARCH_X86_64
|
|
|
|
#elif defined(__arm__) && (defined(__ARM_EABI__) || defined(__thumb__))
|
|
|
|
# if __BYTE_ORDER == __LITTLE_ENDIAN
|
|
# define ARCH_NR AUDIT_ARCH_ARM
|
|
# else
|
|
# define ARCH_NR AUDIT_ARCH_ARMEB
|
|
# endif
|
|
|
|
#elif defined(__i386__)
|
|
|
|
# define ARCH_NR AUDIT_ARCH_I386
|
|
|
|
#elif defined(__mips__)
|
|
|
|
#if _MIPS_SIM == _MIPS_SIM_ABI32
|
|
# if __BYTE_ORDER == __LITTLE_ENDIAN
|
|
# define ARCH_NR AUDIT_ARCH_MIPSEL
|
|
# else
|
|
# define ARCH_NR AUDIT_ARCH_MIPS
|
|
# endif
|
|
#elif _MIPS_SIM == _MIPS_SIM_ABI64
|
|
# if __BYTE_ORDER == __LITTLE_ENDIAN
|
|
# define ARCH_NR AUDIT_ARCH_MIPSEL64
|
|
# else
|
|
# define ARCH_NR AUDIT_ARCH_MIPS64
|
|
# endif
|
|
#else
|
|
# error "Unsupported mips abi"
|
|
#endif
|
|
|
|
#elif defined(__PPC64__)
|
|
|
|
# if __BYTE_ORDER == __LITTLE_ENDIAN
|
|
# define ARCH_NR AUDIT_ARCH_PPC64LE
|
|
# else
|
|
# define ARCH_NR AUDIT_ARCH_PPC64
|
|
# endif
|
|
|
|
#elif defined(__PPC__)
|
|
|
|
# define ARCH_NR AUDIT_ARCH_PPC
|
|
|
|
#elif __riscv && __riscv_xlen == 64
|
|
|
|
# define ARCH_NR AUDIT_ARCH_RISCV64
|
|
|
|
#elif defined(__loongarch__) && __loongarch_grlen == 64
|
|
|
|
# define ARCH_NR AUDIT_ARCH_LOONGARCH64
|
|
|
|
#elif defined(__e2k__)
|
|
|
|
# define ARCH_NR AUDIT_ARCH_E2K
|
|
|
|
#else
|
|
|
|
# error "Platform does not support seccomp filter yet"
|
|
|
|
#endif
|
|
|
|
#endif
|
|
|
|
bool sec_harden(void);
|
|
bool can_drop_root();
|
|
bool droproot(uid_t uid, const char *user, const gid_t *gid, int gid_count);
|
|
void print_id(void);
|
|
void daemonize(void);
|
|
bool writepid(const char *filename);
|