Module options. More...
#include <pam_netns.h>
Data Fields | |
pam_handle_t * | pamh |
bool | debug |
char | before_script [UNIX_PATH_MAX] |
char | after_script [UNIX_PATH_MAX] |
char | setup_script [UNIX_PATH_MAX] |
char | cleanup_script [UNIX_PATH_MAX] |
char | shm_name [UNIX_PATH_MAX] |
char | shm_hlpr_name [UNIX_PATH_MAX] |
int | nodaemon |
int | timeout |
char | prefix [NAME_MAX] |
int | ns_id |
char | helper [UNIX_PATH_MAX] |
const char * | user |
int | out_sfd |
char | out_socket [UNIX_PATH_MAX] |
bool | bind_mount |
bool | shm_del |
bool | unshare_fs |
bool | affect_root |
Module options.
This struct contains module options.
If false pam_netns has no effect for the superuser
char options_t::after_script[UNIX_PATH_MAX] |
Full path name of the after-script
char options_t::before_script[UNIX_PATH_MAX] |
Full path name of the before-script
Make the bind mount in_socket onto out_socket (only pam_socket_proxy)
char options_t::cleanup_script[UNIX_PATH_MAX] |
Cleanup script
bool options_t::debug |
The debug level
char options_t::helper[UNIX_PATH_MAX] |
The path to the helper daemon
Don't daemonize the pam_netns_helper daemon (only for testing it standalone)
int options_t::ns_id |
Identifier for the namespace (defaults to the process-id of the process running the pam-module). This is parameter $2 for before/after-script
The output socket descriptor if opened by parent process (only pam_socket_proxy)
char options_t::out_socket[UNIX_PATH_MAX] |
The name of the ouput socket (only pam_socket_proxy)
pam_handle_t* options_t::pamh |
Handle - needed for logging
char options_t::prefix[NAME_MAX] |
Prefix string for naming e.g. network-interfaces (this is parameter $1 for before/after-script)
char options_t::setup_script[UNIX_PATH_MAX] |
Full patch to the setup script
bool options_t::shm_del |
Remove shm and shm-file at the end of this stack
char options_t::shm_hlpr_name[UNIX_PATH_MAX] |
Full path to the shm for the mutex/cv/state suitable for mkstemp()
char options_t::shm_name[UNIX_PATH_MAX] |
Full path to the shm for the mutex/cv/state suitable for mkstemp()
The timeout in seconds to wait for the before-script/after-script to complete
if you want to unshare the filesystem namespace as well
const char* options_t::user |
Username