attach_options.h

Go to the documentation of this file.

#ifndef __LXC_ATTACH_OPTIONS_H
#define __LXC_ATTACH_OPTIONS_H

#include <sys/types.h>

#ifdef  __cplusplus
extern "C" {
#endif

typedef enum lxc_attach_env_policy_t {
    LXC_ATTACH_KEEP_ENV,   
    LXC_ATTACH_CLEAR_ENV   
} lxc_attach_env_policy_t;

enum {
    /* The following are on by default: */
    LXC_ATTACH_MOVE_TO_CGROUP        = 0x00000001, 
    LXC_ATTACH_DROP_CAPABILITIES     = 0x00000002, 
    LXC_ATTACH_SET_PERSONALITY       = 0x00000004, 
    LXC_ATTACH_LSM_EXEC              = 0x00000008, 
    /* The following are off by default: */
    LXC_ATTACH_REMOUNT_PROC_SYS      = 0x00010000, 
    LXC_ATTACH_LSM_NOW               = 0x00020000, 
    /* Set PR_SET_NO_NEW_PRIVS to block execve() gainable privileges. */
    LXC_ATTACH_NO_NEW_PRIVS      = 0x00040000, 
    /* We have 16 bits for things that are on by default and 16 bits that
     * are off by default, that should be sufficient to keep binary
     * compatibility for a while
     */
    LXC_ATTACH_DEFAULT               = 0x0000FFFF  
};

#define LXC_ATTACH_LSM (LXC_ATTACH_LSM_EXEC | LXC_ATTACH_LSM_NOW)

typedef int (*lxc_attach_exec_t)(void* payload);

typedef struct lxc_attach_options_t {
    int attach_flags;

    int namespaces;

    long personality;

    char* initial_cwd;

    uid_t uid;

    gid_t gid;

    lxc_attach_env_policy_t env_policy;

    char** extra_env_vars;

    char** extra_keep_env;

    int stdin_fd; 
    int stdout_fd; 
    int stderr_fd; 
} lxc_attach_options_t;

#define LXC_ATTACH_OPTIONS_DEFAULT                                             \
    {                                                                      \
        /* .attach_flags = */   LXC_ATTACH_DEFAULT,                    \
        /* .namespaces = */     -1,                                    \
        /* .personality = */    -1,                                    \
        /* .initial_cwd = */    NULL,                                  \
        /* .uid = */            (uid_t)-1,                             \
        /* .gid = */            (gid_t)-1,                             \
        /* .env_policy = */     LXC_ATTACH_KEEP_ENV,                   \
        /* .extra_env_vars = */ NULL,                                  \
        /* .extra_keep_env = */ NULL,                                  \
        /* .stdin_fd = */       0, 1, 2                                \
    }

typedef struct lxc_attach_command_t {
    char* program; 
    char** argv;   
} lxc_attach_command_t;

extern int lxc_attach_run_command(void* payload);

extern int lxc_attach_run_shell(void* payload);

#ifdef  __cplusplus
}
#endif

#endif