capability API to allow plugin-controlled capability set

2008-08-28 16:27:48 +00:00
parent dc98e50153
commit e609b1cda2
6 changed files with 51 additions and 35 deletions
@@ -302,6 +302,15 @@ struct daemon_t {
 	 */
 	gid_t gid;
 	
+	/**
+	 * Do not drop a given capability after initialization.
+	 *
+	 * Some plugins might need additional capabilites. They tell the daemon
+	 * during plugin initialization which one they need, the daemon won't
+	 * drop these.
+	 */
+	void (*keep_cap)(daemon_t *this, u_int cap);
+	
 	/**
 	 * Shut down the daemon.
 	 *