 |
|
|
Home :: International :: Manuals :: Howto :: FAQ :: Man Pages :: Email Login |
CAPGET
Section: Linux Programmer's Manual (2)Updated: 9 Sept 1999
Index Return to Main Contents
̾Á°
capget, capset - ¥×¥í¥»¥¹¤Î»ñ³Ê(capability)¤òÀßÄê/¼èÆÀ¤¹¤ë½ñ¼°
#undef _POSIX_SOURCE#include <sys/capability.h>
int capget(cap_user_header_t header, cap_user_data_t data);
int capset(cap_user_header_t header, const cap_user_data_t data);
ÀâÌÀ
Linux 2.2 ¤Ç¡¢¥¹¡¼¥Ñ¡¼¥æ¡¼¥¶¡¼(root)¤Î¸¢ÎϤϡ¢¤½¤ì¤¾¤ì¸ÄÊ̤Π»ñ³Ê(capability)¤Ø¤Èʬ³ä¤µ¤ì¡¢¤½¤Î½¸¹ç¤È¤·¤Æɽ¸½¤µ¤ì¤ë¤è¤¦¤Ë¤Ê¤Ã¤¿¡£ ¤¹¤Ù¤Æ¤Î¥×¥í¥»¥¹¤Ï¡Ö͸ú¤Ê»ñ³Ê(effective capability)¤Î½¸¹ç¡×¤ò»ý¤Á¡¢ ¤½¤ì¤Ë¤è¤Ã¤Æ¸½ºß¤É¤ÎÁàºî¤¬¼Â¹Ô²Äǽ¤«¤ò¼±Ê̤Ǥ¤ë¡£ ¤Þ¤¿¤¹¤Ù¤Æ¤Î¥×¥í¥»¥¹¤Ï execve(2) ¤òÄ̤·¤Æ¡Ö·Ñ¾µ¤µ¤ì¤ë»ñ³Ê(inheritable capabilit)¤Î½¸¹ç¡×¤È¡¢ ¤½¤Î¥×¥í¥»¥¹¤¬Í¸ú¤Ë¤·¤¿¤ê·Ñ¾µ¤µ¤ì¤ë¤è¤¦¤ËÊѹ¹¤¹¤ë¤³¤È¤ò ¡Öµö²Ä¤µ¤ì¤¿»ñ³Ê(permitted capabily)¤Î½¸¹ç¡×¤ò»ý¤Ã¤Æ¤¤¤ë¡£¤³¤ÎÆó¤Ä¤Î´Ø¿ô¤Ï»ñ³Ê(capability)¤ò¼èÆÀ¤·¤¿¤êÀßÄꤷ¤¿¤ê¤¹¤ë¤¿¤á¤ÎÀ¸¤Î ¥«¡¼¥Í¥ë¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤Ç¤¢¤ë¡£¤³¤ì¤é¤Î¥·¥¹¥Æ¥à¥³¡¼¥ë¤Ï Linux ÆÃÍ¤Ç ¤¢¤ë¤È¤¤¤¦¤Î¤ß¤Ê¤é¤º¡¢¥«¡¼¥Í¥ë API ¤ÏÊѹ¹¤µ¤ì¤ë¤«¤â¤·¤ì¤º¡¢¤³¤ì¤é¤Î ´Ø¿ô¤Î»ÈÍÑË¡(ÆÃ¤Ë cap_user_*_t ·¿¤È¤¤¤¦½ñ¼°)¤Ï¤½¤ì¤¾¤ì¤Î¥«¡¼¥Í¥ë¤Î¥ê¥Ó¥¸¥ç¥ó¤ÇÊѹ¹¤µ¤ì¤ë¤«¤â¤·¤ì¤Ê¤¤¡£
°Ü¿¢À¤Î¤¢¤ë¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤Ï cap_set_proc(3) ¤È cap_get_proc(3) ¤Ç¤¢¤ë¡£ ²Äǽ¤Ê¤é¤Ð¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¤Ë¤Ï¤³¤ì¤é¤Î´Ø¿ô¤ò»ÈÍѤ¹¤Ù¤¤Ç¤¢¤ë¡£ ¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¤Ë Linux ³ÈÄ¥¤ò»ÈÍѤ·¤¿¤¤¾ì¹ç¤Ë¤Ï¡¢¤è¤ê´Êñ¤Ë »È¤¨¤ë¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤Ç¤¢¤ë capsetp(3) ¤È capgetp(3) ¤ò»ÈÍѤ¹¤Ù¤¤Ç¤¢¤ë¡£
ÊÖ¤êÃÍ
À®¸ù¤·¤¿¾ì¹ç¤Ë¤Ï¥¼¥í¤òÊÖ¤¹¡£¥¨¥é¡¼¤Î¾ì¹ç¤Ë¤Ï -1 ¤òÊÖ¤·¡¢ errno ¤òŬÀÚ¤ËÀßÄꤹ¤ë¡£¥¨¥é¡¼
- EINVAL
- °ú¤¿ô¤Î¤É¤ì¤«¤¬Ìµ¸ú¤Ç¤¢¤ë¡£
- EPERM
- ¡Öµö²Ä¤µ¤ì¤¿»ñ³Ê¤Î½¸¹ç¡×¤òÄɲ䷤褦¤È¤·¤Æ¤¤¤ë¤«¡¢¤Þ¤¿¤Ï ¡Öµö²Ä¤µ¤ì¤¿»ñ³Ê¤Î½¸¹ç¡×¤Ë¤Ê¤¤»ñ³Ê¤ò¡Ö͸ú¤Ê»ñ³Ê¤Î½¸¹ç¡×¤ä ¡Ö·Ñ¾µ¤µ¤ì¤ë»ñ³Ê¤Î½¸¹ç¡×¤ËÀßÄꤷ¤è¤¦¤È¤·¤Æ¤¤¤ë¡£
ÄɲþðÊó
»ñ³Ê(capability)¤òÀßÄꤷ¤¿¤ê¼èÆÀ¤·¤¿¤ê¤¹¤ëµ¡Ç½¤Î¤¿¤á¤Î°Ü¿¢À¤¢¤ë ¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤Ï°Ê²¼¤«¤éÆþ¼ê²Äǽ¤Ê libcap ¥é¥¤¥Ö¥é¥ê¤Ë¤è¤Ã¤ÆÄ󶡤µ¤ì¤ë:ftp://linux.kernel.org/pub/linux/libs/security/linux-privs