security

Documentation

Overview

Package security manages:

• Cache clearing (cache.go)
• Privilege manipulation (privileges.go)

Index

• func DropFilesystemCache() error
• func GetUids() (int, int, int)
• func SetProcessPrivileges(privs *Privileges) error
• func SetUids(ruid, euid, suid int) error
• type Privileges
  • func ProcessPrivileges() (*Privileges, error)
  • func UserPrivileges(user *user.User) (*Privileges, error)

Functions

func DropFilesystemCache

func DropFilesystemCache() error

DropFilesystemCache instructs the kernel to free the reclaimable inodes and dentries. This has the effect of making encrypted directories whose keys are not present no longer accessible. Requires root privileges.

func GetUids

func GetUids() (int, int, int)

GetUids gets the process's real, effective, and saved UIDs.

func SetProcessPrivileges

func SetProcessPrivileges(privs *Privileges) error

SetProcessPrivileges sets the privileges of the current process to have those specified by privs. The original privileges can be obtained by first saving the output of ProcessPrivileges, calling SetProcessPrivileges with the desired privs, then calling SetProcessPrivileges with the saved privs.

func SetUids

func SetUids(ruid, euid, suid int) error

SetUids sets the process's real, effective, and saved UIDs.

Types

type Privileges

type Privileges struct {
	// contains filtered or unexported fields
}

Privileges encapsulate the effective uid/gid and groups of a process.

func ProcessPrivileges

func ProcessPrivileges() (*Privileges, error)

ProcessPrivileges returns the process's current effective privileges.

func UserPrivileges

func UserPrivileges(user *user.User) (*Privileges, error)

UserPrivileges returns the default privileges for the specified user.