FM / isc

/usr/include/isc

Name	Size	Mode	Actions
app.h	10535	0644	edit dl rm
assertions.h	3314	0644	edit dl rm
atomic.h	4258	0644	edit dl rm
base64.h	2967	0644	edit dl rm
bind9.h	1185	0644	edit dl rm
bitstring.h	4478	0644	edit dl rm
boolean.h	1212	0644	edit dl rm
buffer.h	22941	0644	edit dl rm
bufferlist.h	1979	0644	edit dl rm
commandline.h	1823	0644	edit dl rm
condition.h	2011	0644	edit dl rm
counter.h	2328	0644	edit dl rm
dir.h	2569	0644	edit dl rm
entropy.h	9444	0644	edit dl rm
error.h	1871	0644	edit dl rm
event.h	3360	0644	edit dl rm
eventclass.h	1915	0644	edit dl rm
file.h	9259	0644	edit dl rm
formatcheck.h	1423	0644	edit dl rm
fsaccess.h	7954	0644	edit dl rm
hash.h	5973	0644	edit dl rm
heap.h	5754	0644	edit dl rm
hex.h	2911	0644	edit dl rm
hmacmd5.h	1964	0644	edit dl rm
httpd.h	2029	0644	edit dl rm
int.h	1873	0644	edit dl rm
interfaceiter.h	3631	0644	edit dl rm
iterated_hash.h	1512	0644	edit dl rm
keyboard.h	1510	0644	edit dl rm
lang.h	1158	0644	edit dl rm
lex.h	9653	0644	edit dl rm
lfsr.h	3480	0644	edit dl rm
lib.h	1594	0644	edit dl rm
list.h	5887	0644	edit dl rm
log.h	28964	0644	edit dl rm
magic.h	1471	0644	edit dl rm
md5.h	2527	0644	edit dl rm
mem.h	21767	0644	edit dl rm
msgcat.h	3256	0644	edit dl rm
msgs.h	8862	0644	edit dl rm
mutex.h	4061	0644	edit dl rm
mutexblock.h	1902	0644	edit dl rm
namespace.h	7184	0644	edit dl rm
net.h	9269	0644	edit dl rm
netaddr.h	4917	0644	edit dl rm
netdb.h	1392	0644	edit dl rm
offset.h	1898	0644	edit dl rm
once.h	1510	0644	edit dl rm
ondestroy.h	3327	0644	edit dl rm
os.h	1191	0644	edit dl rm
parseint.h	2058	0644	edit dl rm
platform.h	8623	0644	edit dl rm
print.h	2449	0644	edit dl rm
quota.h	2873	0644	edit dl rm
radix.h	7058	0644	edit dl rm
random.h	1826	0644	edit dl rm
ratelimiter.h	3564	0644	edit dl rm
refcount.h	6203	0644	edit dl rm
region.h	2497	0644	edit dl rm
resource.h	3396	0644	edit dl rm
result.h	4814	0644	edit dl rm
resultclass.h	2077	0644	edit dl rm
rwlock.h	3843	0644	edit dl rm
serial.h	1959	0644	edit dl rm
sha1.h	1806	0644	edit dl rm
sha2.h	5861	0644	edit dl rm
sockaddr.h	6578	0644	edit dl rm
socket.h	32969	0644	edit dl rm
stdio.h	2243	0644	edit dl rm
stdlib.h	1221	0644	edit dl rm
stdtime.h	1880	0644	edit dl rm
string.h	6404	0644	edit dl rm
symtab.h	4748	0644	edit dl rm
syslog.h	1373	0644	edit dl rm
task.h	19753	0644	edit dl rm
taskpool.h	3787	0644	edit dl rm
thread.h	1878	0644	edit dl rm
time.h	8045	0644	edit dl rm
timer.h	11285	0644	edit dl rm
types.h	5929	0644	edit dl rm
util.h	7934	0644	edit dl rm
version.h	1207	0644	edit dl rm
xml.h	1556	0644	edit dl rm

Edit: /usr/include/isc/fsaccess.h (7954B)

/*
 * Copyright (C) 2004-2007, 2009  Internet Systems Consortium, Inc. ("ISC")
 * Copyright (C) 2000, 2001  Internet Software Consortium.
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 * PERFORMANCE OF THIS SOFTWARE.
 */

/* $Id: fsaccess.h,v 1.16 2009-01-17 23:47:43 tbox Exp $ */

#ifndef ISC_FSACCESS_H
#define ISC_FSACCESS_H 1

/*! \file isc/fsaccess.h
 * \brief The ISC filesystem access module encapsulates the setting of file
 * and directory access permissions into one API that is meant to be
 * portable to multiple operating systems.
 *
 * The two primary operating system flavors that are initially accommodated
 * are POSIX and Windows NT 4.0 and later.  The Windows NT access model is
 * considerable more flexible than POSIX's model (as much as I am loathe to
 * admit it), and so the ISC API has a higher degree of complexity than would
 * be needed to simply address POSIX's needs.
 *
 * The full breadth of NT's flexibility is not available either, for the
 * present time.  Much of it is to provide compatibility with what Unix
 * programmers are expecting.  This is also due to not yet really needing all
 * of the functionality of an NT system (or, for that matter, a POSIX system)
 * in BIND9, and so resolving how to handle the various incompatibilities has
 * been a purely theoretical exercise with no operational experience to
 * indicate how flawed the thinking may be.
 *
 * Some of the more notable dumbing down of NT for this API includes:
 *
 *\li   Each of FILE_READ_DATA and FILE_READ_EA are set with #ISC_FSACCESS_READ.
 *
 * \li  All of FILE_WRITE_DATA, FILE_WRITE_EA and FILE_APPEND_DATA are
 *     set with #ISC_FSACCESS_WRITE.  FILE_WRITE_ATTRIBUTES is not set
 *     so as to be consistent with Unix, where only the owner of the file
 *     or the superuser can change the attributes/mode of a file.
 *
 * \li  Both of FILE_ADD_FILE and FILE_ADD_SUBDIRECTORY are set with
 *     #ISC_FSACCESS_CREATECHILD.  This is similar to setting the WRITE
 *     permission on a Unix directory.
 *
 * \li  SYNCHRONIZE is always set for files and directories, unless someone
 *     can give me a reason why this is a bad idea.
 *
 * \li  READ_CONTROL and FILE_READ_ATTRIBUTES are always set; this is
 *     consistent with Unix, where any file or directory can be stat()'d
 *     unless the directory path disallows complete access somewhere along
 *     the way.
 *
 * \li  WRITE_DAC is only set for the owner.  This too is consistent with
 *     Unix, and is tighter security than allowing anyone else to be
 *     able to set permissions.
 *
 * \li  DELETE is only set for the owner.  On Unix the ability to delete
 *     a file is controlled by the directory permissions, but it isn't
 *     currently clear to me what happens on NT if the directory has
 *     FILE_DELETE_CHILD set but a file within it does not have DELETE
 *     set.  Always setting DELETE on the file/directory for the owner
 *     gives maximum flexibility to the owner without exposing the
 *     file to deletion by others.
 *
 * \li  WRITE_OWNER is never set.  This too is consistent with Unix,
 *     and is also tighter security than allowing anyone to change the
 *     ownership of the file apart from the superu..ahem, Administrator.
 *
 * \li  Inheritance is set to NO_INHERITANCE.
 *
 * Unix's dumbing down includes:
 *
 * \li  The sticky bit cannot be set.
 *
 * \li  setuid and setgid cannot be set.
 *
 * \li  Only regular files and directories can be set.
 *
 * The rest of this comment discusses a few of the incompatibilities
 * between the two systems that need more thought if this API is to
 * be extended to accommodate them.
 *
 * The Windows standard access right "DELETE" doesn't have a direct
 * equivalent in the Unix world, so it isn't clear what should be done
 * with it.
 *
 * The Unix sticky bit is not supported.  While NT does have a concept
 * of allowing users to create files in a directory but not delete or
 * rename them, it does not have a concept of allowing them to be deleted
 * if they are owned by the user trying to delete/rename.  While it is
 * probable that something could be cobbled together in NT 5 with inheritance,
 * it can't really be done in NT 4 as a single property that you could
 * set on a directory.  You'd need to coordinate something with file creation
 * so that every file created had DELETE set for the owner but noone else.
 *
 * On Unix systems, setting #ISC_FSACCESS_LISTDIRECTORY sets READ.
 * ... setting either #ISC_FSACCESS_CREATECHILD or #ISC_FSACCESS_DELETECHILD
 *      sets WRITE.
 * ... setting #ISC_FSACCESS_ACCESSCHILD sets EXECUTE.
 *
 * On NT systems, setting #ISC_FSACCESS_LISTDIRECTORY sets FILE_LIST_DIRECTORY.
 * ... setting #ISC_FSACCESS_CREATECHILD sets FILE_CREATE_CHILD independently.
 * ... setting #ISC_FSACCESS_DELETECHILD sets FILE_DELETE_CHILD independently.
 * ... setting #ISC_FSACCESS_ACCESSCHILD sets FILE_TRAVERSE.
 *
 * Unresolved:							XXXDCL
 * \li  What NT access right controls the ability to rename a file?
 * \li  How does DELETE work?  If a directory has FILE_DELETE_CHILD but a
 *      file or directory within it does not have DELETE, is that file
 *	or directory deletable?
 * \li  To implement isc_fsaccess_get(), mapping an existing Unix permission
 * 	mode_t back to an isc_fsaccess_t is pretty trivial; however, mapping
 *	an NT DACL could be impossible to do in a responsible way.
 * \li  Similarly, trying to implement the functionality of being able to
 *	say "add group writability to whatever permissions already exist"
 *	could be tricky on NT because of the order-of-entry issue combined
 *	with possibly having one or more matching ACEs already explicitly
 *	granting or denying access.  Because this functionality is
 *	not yet needed by the ISC, no code has been written to try to
 * 	solve this problem.
 */

#include <isc/lang.h>
#include <isc/types.h>

/*
 * Trustees.
 */
#define ISC_FSACCESS_OWNER	0x1 /*%< User account. */
#define ISC_FSACCESS_GROUP	0x2 /*%< Primary group owner. */
#define ISC_FSACCESS_OTHER	0x4 /*%< Not the owner or the group owner. */
#define ISC_FSACCESS_WORLD	0x7 /*%< User, Group, Other. */

/*
 * Types of permission.
 */
#define ISC_FSACCESS_READ		0x00000001 /*%< File only. */
#define ISC_FSACCESS_WRITE		0x00000002 /*%< File only. */
#define ISC_FSACCESS_EXECUTE		0x00000004 /*%< File only. */
#define ISC_FSACCESS_CREATECHILD	0x00000008 /*%< Dir only. */
#define ISC_FSACCESS_DELETECHILD	0x00000010 /*%< Dir only. */
#define ISC_FSACCESS_LISTDIRECTORY	0x00000020 /*%< Dir only. */
#define ISC_FSACCESS_ACCESSCHILD	0x00000040 /*%< Dir only. */

/*%
 * Adding any permission bits beyond 0x200 would mean typedef'ing
 * isc_fsaccess_t as isc_uint64_t, and redefining this value to
 * reflect the new range of permission types, Probably to 21 for
 * maximum flexibility.  The number of bits has to accommodate all of
 * the permission types, and three full sets of them have to fit
 * within an isc_fsaccess_t.
 */
#define ISC__FSACCESS_PERMISSIONBITS 10

ISC_LANG_BEGINDECLS

void
isc_fsaccess_add(int trustee, int permission, isc_fsaccess_t *access);

void
isc_fsaccess_remove(int trustee, int permission, isc_fsaccess_t *access);

isc_result_t
isc_fsaccess_set(const char *path, isc_fsaccess_t access);

ISC_LANG_ENDDECLS

#endif /* ISC_FSACCESS_H */

cmd: