illumos: manual page: priv

PRIV_SET(3C) Standard C Library Functions PRIV_SET(3C)

NAME

priv_set, priv_ineffect - change privilege sets and check whether
privileges are set

SYNOPSIS

#include <priv.h>

int priv_set(priv_op_t op, priv_ptype_t which...);

boolean_t priv_ineffect(const char *priv);

DESCRIPTION

The priv_set() function is a convenient wrapper for the setppriv(2)
function. It takes three or more arguments. The operation argument, op,
can be one of PRIV_OFF, PRIV_ON or PRIV_SET. The which argument is the
name of the privilege set to change. The third argument is a list of zero
or more privilege names terminated with a null pointer. If which is the
special pseudo set PRIV_ALLSETS, the operation should be applied to all
privilege sets.

The specified privileges are converted to a binary privilege set and
setppriv() is called with the same op and which arguments. When called
with PRIV_ALLSETS as the value for the which argument, setppriv() is
called for each set in turn, aborting on the first failed call.

The priv_ineffect() function is a conventient wrapper for the getppriv(2)
function. The priv argument specifies the name of the privilege for which
this function checks its presence in the effective set.

RETURN VALUES

Upon successful completion, priv_set() return 0. Otherwise, -1 is
returned and errno is set to indicate the error.

If priv is a valid privilege that is a member of the effective set,
priv_ineffect() returns B_TRUE. Otherwise, it returns B_FALSE and sets
errno to incicate the error.

ERRORS

The priv_set() function will fail if:

EINVAL
The value of op or which is out of range.

ENOMEM
Insufficient memory was allocated.

EPERM
The application attempted to add privileges to PRIV_LIMIT or
PRIV_PERMITTED, or the application attempted to add privileges
to PRIV_INHERITABLE or PRIV_EFFECTIVE that were not in
PRIV_PERMITTED.

The priv_ineffect() function will fail if:

EINVAL
The privilege specified by priv is invalid.

ENOMEM
Insufficient memory was allocated.