Systemd/src/shared/dev-setup.h

/* SPDX-License-Identifier: LGPL-2.1+ */
#pragma once

#include <sys/types.h>

int dev_setup(const char *prefix, uid_t uid, gid_t gid);

int make_inaccessible_nodes(const char *root, uid_t uid, gid_t gid);
Add SPDX license identifiers to source files under the LGPL This follows what the kernel is doing, c.f. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5fd54ace4721fc5ce2bb5aef6318fcf17f421460. 2017-11-18 17:09:20 +01:00			`/* SPDX-License-Identifier: LGPL-2.1+ */`
dev-setup: allow a path prefix for use in chroots With this adjustment, we can reuse this code elsewhere, such as in nspawn. 2012-08-15 02:00:30 +02:00			`#pragma once`
udev: unify /dev static symlink setup 2012-04-17 22:25:24 +02:00
nspawn: finish user namespace support 2015-05-21 16:30:58 +02:00			`#include <sys/types.h>`

			`int dev_setup(const char *prefix, uid_t uid, gid_t gid);`
dev-setup: generalize logic we use to create "inaccessible" device nodes Let's generalize this, so that we can use this in nspawn later on, which is pretty useful as we need to be able to mask files from the inner child of nspawn too, where the host's /run/systemd/inaccessible directory is not visible anymore. Moreover, if nspawn can create these nodes on its own before the payload this means the payload can run with fewer privileges. 2018-07-27 18:04:11 +02:00
			`int make_inaccessible_nodes(const char *root, uid_t uid, gid_t gid);`