priv_set

, priv_ineffect

- change privilege sets and check whether privileges are set

Synopsis

#include <priv.h>

int priv_set(priv_op_t op, priv_ptype_t  which...);

boolean_t priv_ineffect(const char *priv);

Description

The priv_set() function is a convenient wrapper for the setppriv(2) function. It takes three or more arguments. The operation argument, op, can be one of PRIV_OFF, PRIV_ON or PRIV_SET. The which argument is the name of the privilege set to change. The third argument is a list of zero or more privilege names terminated with a null pointer. If which is the special pseudo set PRIV_ALLSETS, the operation should be applied to all privilege sets.

The specified privileges are converted to a binary privilege set and setppriv() is called with the same op and which arguments. When called with PRIV_ALLSETS as the value for the which argument, setppriv() is called for each set in turn, aborting on the first failed call.

The priv_ineffect() function is a convenient wrapper for the getppriv(2) function. The priv argument specifies the name of the privilege for which this function checks its presence in the effective set.

Return Values

Upon successful completion, priv_set() return 0. Otherwise, -1 is returned and errno is set to indicate the error.

If priv is a valid privilege that is a member of the effective set, priv_ineffect() returns B_TRUE. Otherwise, it returns B_FALSE and sets errno to indicate the error.

Errors

The priv_set() function will fail if:

EINVAL

The value of op or which is out of range.

ENOMEM

Insufficient memory was allocated.

EPERM

The application attempted to add privileges to PRIV_LIMIT or PRIV_PERMITTED, or the application attempted to add privileges to PRIV_INHERITABLE or PRIV_EFFECTIVE that were not in PRIV_PERMITTED.

The priv_ineffect() function will fail if:

EINVAL

The privilege specified by priv is invalid.

ENOMEM

Insufficient memory was allocated.

Attributes

See attributes(5) for descriptions of the following attributes:

See Also

setppriv(2), priv_str_to_set(3C), attributes(5), privileges(5)