include/pam_netns.h

Go to the documentation of this file.

/*
 *   $Id: pam_netns.h 47 2010-11-24 01:59:04Z julianthome $
 *
 *   pam_netns - Linux-PAM module for instantiating session network namespaces
 *
 *   Copyright (C) 2010 Wilhelm Meier (wilhelm.meier@informatik.fh-kl.de)
 *
 *   This program is free software; you can redistribute it and/or modify it under the terms of
 *   the GNU General Public License as published by the Free Software Foundation;
 *   either version 3 of the License, or (at your option) any later version.
 *
 *   This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
 *   without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 *   See the GNU General Public License for more details.
 *
 *   You should have received a copy of the GNU General Public License along with this program;
 *   if not, see <http://www.gnu.org/licenses/>.
 */

#ifndef PAM_NETNS_H
#define PAM_NETNS_H PAM_NETNS_H

// all POSIX stuff
#include "common.h"
#include <security/pam_ext.h>

// should this be in sched.h ?
#ifndef CLONE_NEWNET
#include <linux/sched.h>
#endif

#include "util.h"
#include "pexec.h"
#define MAX_NUMBER_OF_PROXIES 10
#define DEFAULT_SESID_LEN 48

typedef struct {
        pam_handle_t *pamh;
        bool debug;
        char before_script[UNIX_PATH_MAX];
        char after_script[UNIX_PATH_MAX];
        char setup_script[UNIX_PATH_MAX];
        char cleanup_script[UNIX_PATH_MAX];
        char shm_name[UNIX_PATH_MAX];
        char shm_hlpr_name[UNIX_PATH_MAX];
        int nodaemon;
        int timeout;
        char prefix[NAME_MAX];
        int ns_id;
        char helper[UNIX_PATH_MAX];
        const char *user;
        int out_sfd;
        char out_socket[UNIX_PATH_MAX];
        bool bind_mount;
        bool shm_del;
        bool unshare_fs;
        bool affect_root;
} options_t;

#define DEFAULT_BEFORE_SCRIPT           "/etc/security/netns_before"
#define DEFAULT_AFTER_SCRIPT            "/etc/security/netns_after"
#define DEFAULT_SETUP_SCRIPT            "/etc/security/netns_setup"
#define DEFAULT_CLEANUP_SCRIPT          "/etc/security/netns_cleanup"
#define DEFAULT_SHM_NAME                "/tmp/pam_netns_shmXXXXXX"
#define DEFAULT_TIMEOUT_SECS            4
#define DEFAULT_PREFIX                  "ns"
#define DEFAULT_HELPER                  "/lib/security/pam_netns_helper"

#ifdef _POSIX_THREADS

#else                           // _POSIX_THREADS
#error "No Posix Threads available"
#endif

void parse_options(int argc, const char **argv);

typedef int (*cb_ft) (const void *param1, ...);

#endif