FM / sys

/usr/include/sys

Name	Size	Mode	Actions
platform/	-	0755	rm
acct.h	3302	0644	edit dl rm
auxv.h	1260	0644	edit dl rm
bitypes.h	86	0644	edit dl rm
capability.h	7233	0644	edit dl rm
cdefs.h	26257	0644	edit dl rm
debugreg.h	3576	0644	edit dl rm
dir.h	922	0644	edit dl rm
elf.h	1024	0644	edit dl rm
epoll.h	5076	0644	edit dl rm
errno.h	19	0644	edit dl rm
eventfd.h	1400	0644	edit dl rm
fanotify.h	1292	0644	edit dl rm
fcntl.h	19	0644	edit dl rm
file.h	1675	0644	edit dl rm
fsuid.h	1188	0644	edit dl rm
gmon.h	6230	0644	edit dl rm
gmon_out.h	2636	0644	edit dl rm
inotify.h	3901	0644	edit dl rm
io.h	5086	0644	edit dl rm
ioctl.h	2027	0644	edit dl rm
ipc.h	1462	0644	edit dl rm
kd.h	1112	0644	edit dl rm
klog.h	1204	0644	edit dl rm
mman.h	5552	0644	edit dl rm
mount.h	5706	0644	edit dl rm
msg.h	2623	0644	edit dl rm
mtio.h	11163	0644	edit dl rm
param.h	3149	0644	edit dl rm
pci.h	923	0644	edit dl rm
perm.h	1127	0644	edit dl rm
personality.h	2723	0644	edit dl rm
poll.h	3025	0644	edit dl rm
prctl.h	1795	0644	edit dl rm
procfs.h	4338	0644	edit dl rm
profil.h	1959	0644	edit dl rm
psx_syscall.h	2833	0644	edit dl rm
ptrace.h	6126	0644	edit dl rm
queue.h	19539	0644	edit dl rm
quota.h	5173	0644	edit dl rm
random.h	1471	0644	edit dl rm
raw.h	1182	0644	edit dl rm
reboot.h	1633	0644	edit dl rm
reg.h	1827	0644	edit dl rm
resource.h	4034	0644	edit dl rm
rseq.h	6405	0644	edit dl rm
sdt-config.h	245	0644	edit dl rm
sdt.h	22331	0644	edit dl rm
select.h	5039	0644	edit dl rm
sem.h	2660	0644	edit dl rm
sendfile.h	1806	0644	edit dl rm
shm.h	2131	0644	edit dl rm
signal.h	20	0644	edit dl rm
signalfd.h	1714	0644	edit dl rm
single_threaded.h	1182	0644	edit dl rm
socket.h	12382	0644	edit dl rm
socketvar.h	141	0644	edit dl rm
soundcard.h	29	0644	edit dl rm
stat.h	13735	0644	edit dl rm
statfs.h	2094	0644	edit dl rm
statvfs.h	2821	0644	edit dl rm
swap.h	1593	0644	edit dl rm
syscall.h	1256	0644	edit dl rm
sysinfo.h	1518	0644	edit dl rm
syslog.h	7786	0644	edit dl rm
sysmacros.h	2103	0644	edit dl rm
termios.h	74	0644	edit dl rm
time.h	9139	0644	edit dl rm
timeb.h	1155	0644	edit dl rm
timerfd.h	2583	0644	edit dl rm
times.h	1597	0644	edit dl rm
timex.h	2839	0644	edit dl rm
ttychars.h	2499	0644	edit dl rm
ttydefaults.h	3568	0644	edit dl rm
types.h	5713	0644	edit dl rm
ucontext.h	5842	0644	edit dl rm
uio.h	6796	0644	edit dl rm
un.h	1453	0644	edit dl rm
unistd.h	20	0644	edit dl rm
user.h	5208	0644	edit dl rm
utsname.h	2481	0644	edit dl rm
vfs.h	161	0644	edit dl rm
vlimit.h	1880	0644	edit dl rm
vm86.h	1199	0644	edit dl rm
vt.h	22	0644	edit dl rm
wait.h	6233	0644	edit dl rm
xattr.h	4275	0644	edit dl rm

Edit: /usr/include/sys/capability.h (7233B)

/*
 * <sys/capability.h>
 *
 * Copyright (C) 1997   Aleph One
 * Copyright (C) 1997,8, 2008,19,20 Andrew G. Morgan <morgan@kernel.org>
 *
 * defunct POSIX.1e Standard: 25.2 Capabilities           <sys/capability.h>
 */

#ifndef _SYS_CAPABILITY_H
#define _SYS_CAPABILITY_H

#ifdef __cplusplus
extern "C" {
#endif

/*
 * This file complements the kernel file by providing prototype
 * information for the user library.
 */

#include <sys/types.h>
#include <stdint.h>
#include <linux/types.h>

#ifndef __user
#define __user
#endif
#include <linux/capability.h>

/*
 * POSIX capability types
 */

/*
 * Opaque capability handle (defined internally by libcap)
 * internal capability representation
 */
typedef struct _cap_struct *cap_t;

/* "external" capability representation is a (void *) */

/*
 * This is the type used to identify capabilities
 */

typedef int cap_value_t;

/*
 * libcap initialized first unnamed capability of the running kernel.
 * capsh includes a runtime test to flag when this is larger than
 * what is known to libcap... Time for a new libcap release!
 */
extern cap_value_t cap_max_bits(void);

/*
 * Set identifiers
 */
typedef enum {
    CAP_EFFECTIVE = 0,                 /* Specifies the effective flag */
    CAP_PERMITTED = 1,                 /* Specifies the permitted flag */
    CAP_INHERITABLE = 2                /* Specifies the inheritable flag */
} cap_flag_t;

typedef enum {
    CAP_IAB_INH = 2,
    CAP_IAB_AMB = 3,
    CAP_IAB_BOUND = 4
} cap_iab_vector_t;

/*
 * An opaque generalization of the inheritable bits that includes both
 * what ambient bits to raise and what bounding bits to *lower* (aka
 * drop).  None of these bits once set, using cap_iab_set(), affect
 * the running process but are consulted, through the execve() system
 * call, by the kernel. Note, the ambient bits ('A') of the running
 * process are fragile with respect to other aspects of the "posix"
 * (cap_t) operations: most importantly, 'A' cannot ever hold bits not
 * present in the intersection of 'pI' and 'pP'. The kernel
 * immediately drops all ambient caps whenever such a situation
 * arises. Typically, the ambient bits are used to support a naive
 * capability inheritance model - at odds with the POSIX (sic) model
 * of inheritance where inherited (pI) capabilities need to also be
 * wanted by the executed binary (fI) in order to become raised
 * through exec.
 */
typedef struct cap_iab_s *cap_iab_t;

/*
 * These are the states available to each capability
 */
typedef enum {
    CAP_CLEAR=0,                            /* The flag is cleared/disabled */
    CAP_SET=1                                    /* The flag is set/enabled */
} cap_flag_value_t;

/*
 * User-space capability manipulation routines
 */
typedef unsigned cap_mode_t;
#define CAP_MODE_UNCERTAIN    ((cap_mode_t) 0)
#define CAP_MODE_NOPRIV       ((cap_mode_t) 1)
#define CAP_MODE_PURE1E_INIT  ((cap_mode_t) 2)
#define CAP_MODE_PURE1E       ((cap_mode_t) 3)

/* libcap/cap_alloc.c */
extern cap_t      cap_dup(cap_t);
extern int        cap_free(void *);
extern cap_t      cap_init(void);
extern cap_iab_t  cap_iab_init(void);

/* libcap/cap_flag.c */
extern int     cap_get_flag(cap_t, cap_value_t, cap_flag_t, cap_flag_value_t *);
extern int     cap_set_flag(cap_t, cap_flag_t, int, const cap_value_t *,
			    cap_flag_value_t);
extern int     cap_clear(cap_t);
extern int     cap_clear_flag(cap_t, cap_flag_t);

extern cap_flag_value_t cap_iab_get_vector(cap_iab_t, cap_iab_vector_t,
					 cap_value_t);
extern int     cap_iab_set_vector(cap_iab_t, cap_iab_vector_t, cap_value_t,
				cap_flag_value_t);
extern int     cap_iab_fill(cap_iab_t, cap_iab_vector_t, cap_t, cap_flag_t);

/* libcap/cap_file.c */
extern cap_t   cap_get_fd(int);
extern cap_t   cap_get_file(const char *);
extern uid_t   cap_get_nsowner(cap_t);
extern int     cap_set_fd(int, cap_t);
extern int     cap_set_file(const char *, cap_t);
extern int     cap_set_nsowner(cap_t, uid_t);

/* libcap/cap_proc.c */
extern cap_t   cap_get_proc(void);
extern cap_t   cap_get_pid(pid_t);
extern int     cap_set_proc(cap_t);

extern int     cap_get_bound(cap_value_t);
extern int     cap_drop_bound(cap_value_t);
#define CAP_IS_SUPPORTED(cap)  (cap_get_bound(cap) >= 0)

extern int     cap_get_ambient(cap_value_t);
extern int     cap_set_ambient(cap_value_t, cap_flag_value_t);
extern int     cap_reset_ambient(void);
#define CAP_AMBIENT_SUPPORTED() (cap_get_ambient(CAP_CHOWN) >= 0)

/* libcap/cap_extint.c */
extern ssize_t cap_size(cap_t);
extern ssize_t cap_copy_ext(void *, cap_t, ssize_t);
extern cap_t   cap_copy_int(const void *);

/* libcap/cap_text.c */
extern cap_t   cap_from_text(const char *);
extern char *  cap_to_text(cap_t, ssize_t *);
extern int     cap_from_name(const char *, cap_value_t *);
extern char *  cap_to_name(cap_value_t);

extern char *     cap_iab_to_text(cap_iab_t iab);
extern cap_iab_t  cap_iab_from_text(const char *text);

#define CAP_DIFFERS(result, flag)  (((result) & (1 << (flag))) != 0)
extern int     cap_compare(cap_t, cap_t);

/* libcap/cap_proc.c */
extern void cap_set_syscall(long int (*new_syscall)(long int,
				long int, long int, long int),
			    long int (*new_syscall6)(long int,
				long int, long int, long int,
				long int, long int, long int));

extern int cap_set_mode(cap_mode_t flavor);
extern cap_mode_t cap_get_mode(void);
extern const char *cap_mode_name(cap_mode_t flavor);

extern unsigned cap_get_secbits(void);
extern int cap_set_secbits(unsigned bits);

extern int cap_prctl(long int pr_cmd, long int arg1, long int arg2,
		    long int arg3, long int arg4, long int arg5);
extern int cap_prctlw(long int pr_cmd, long int arg1, long int arg2,
		     long int arg3, long int arg4, long int arg5);

extern int cap_setuid(uid_t uid);
extern int cap_setgroups(gid_t gid, size_t ngroups, const gid_t groups[]);

extern cap_iab_t cap_iab_get_proc(void);
extern int cap_iab_set_proc(cap_iab_t iab);

typedef struct cap_launch_s *cap_launch_t;

extern cap_launch_t cap_new_launcher(const char *arg0, const char * const *argv,
				     const char * const *envp);
extern void cap_launcher_callback(cap_launch_t attr,
				  int (callback_fn)(void *detail));
extern void cap_launcher_setuid(cap_launch_t attr, uid_t uid);
extern void cap_launcher_setgroups(cap_launch_t attr, gid_t gid,
				   int ngroups, const gid_t *groups);
extern void cap_launcher_set_mode(cap_launch_t attr, cap_mode_t flavor);
extern cap_iab_t cap_launcher_set_iab(cap_launch_t attr, cap_iab_t iab);
extern void cap_launcher_set_chroot(cap_launch_t attr, const char *chroot);
extern pid_t cap_launch(cap_launch_t attr, void *data);

/*
 * system calls - look to libc for function to system call
 * mapping. Note, libcap does not use capset directly, but permits the
 * cap_set_syscall() to redirect the system call function.
 */
extern int capget(cap_user_header_t header, cap_user_data_t data);
extern int capset(cap_user_header_t header, const cap_user_data_t data);

/* deprecated - use cap_get_pid() */
extern int capgetp(pid_t pid, cap_t cap_d);

/* not valid with filesystem capability support - use cap_set_proc() */
extern int capsetp(pid_t pid, cap_t cap_d);

#ifdef __cplusplus
}
#endif

#endif /* _SYS_CAPABILITY_H */

cmd: