GETPPRIV(2) System Calls GETPPRIV(2)

NAME

getppriv, setppriv - get or set a privilege set

SYNOPSIS

#include <priv.h>

int getppriv(priv_ptype_t which, priv_set_t *set);


int setppriv(priv_op_t op, priv_ptype_t which, priv_set_t *set);

DESCRIPTION

The getppriv() function returns the process privilege set specified by
which in the set pointed to by set. The memory for set is allocated with
priv_allocset() and freed with priv_freeset(). Both functions are
documented on the priv_addset(3C) manual page.


The setppriv() function sets or changes the process privilege set. The op
argument specifies the operation and can be one of PRIV_OFF, PRIV_ON or
PRIV_SET. The which argument specifies the name of the privilege set. The
set argument specifies the set.


If op is PRIV_OFF, the privileges in set are removed from the process
privilege set specified by which. There are no restrictions on removing
privileges from process privileges sets, but the following apply:

o Privileges removed from PRIV_PERMITTED are silently removed
from PRIV_EFFECTIVE.

o If privileges are removed from PRIV_LIMIT, they are not
removed from the other sets until one of exec(2) functions has
successfully completed.


If op is PRIV_ON, the privileges in set are added to the process
privilege set specified by which. The following operations are
permitted:

o Privileges in PRIV_PERMITTED can be added to PRIV_EFFECTIVE
without restriction.

o Privileges in PRIV_PERMITTED can be added to PRIV_INHERITABLE
without restriction.

o All operations that attempt to add privileges that are already
present are permitted.


If op is PRIV_SET, the privileges in set replace completely the process
privilege set specified by which. PRIV_SET is implemented in terms of
PRIV_OFF and PRIV_ON. The same restrictions apply.

RETURN VALUES

Upon successful completion, 0 is returned. Otherwise, -1 is returned and
errno is set to indicate the error.

ERRORS

The getppriv() and setppriv() functions will fail if:

EINVAL
The value of op or which is out of range.


EFAULT
The set argument points to an illegal address.


The setppriv() function will fail if:

EPERM
The application attempted to add privileges to PRIV_LIMIT or
PRIV_PERMITTED, or the application attempted to add privileges
to PRIV_INHERITABLE or PRIV_EFFECTIVE which were not in
PRIV_PERMITTED.

ATTRIBUTES

See attributes(7) for descriptions of the following attributes:


+--------------------+-----------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+--------------------+-----------------+
|Interface Stability | Evolving |
+--------------------+-----------------+
|MT-Level | MT-Safe |
+--------------------+-----------------+

SEE ALSO

priv_addset(3C), attributes(7), privileges(7)

September 10, 2004 GETPPRIV(2)