cap-primitives 0.4.0

Capability-oriented primitives
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

mod canonicalize_impl;
mod ensure_cloexec;
mod file_metadata;
#[cfg(any(test, racy_asserts))]
mod file_path;
mod open_entry_impl;
mod open_impl;
mod procfs;
mod set_permissions_impl;
mod set_times_impl;
mod stat_impl;

pub(crate) use crate::fs::via_parent::set_times_nofollow as set_times_nofollow_impl;
pub(crate) use canonicalize_impl::*;
pub(crate) use ensure_cloexec::*;
#[cfg(any(test, racy_asserts))]
pub(crate) use file_path::*;
pub(crate) use open_entry_impl::*;
pub(crate) use open_impl::*;
pub(crate) use set_permissions_impl::*;
pub(crate) use set_times_impl::*;
pub(crate) use stat_impl::*;

use file_metadata::file_metadata;

/// Like `dir_options`, but for file descriptors that will only be used as
/// the base in `*at` calls.
pub(crate) fn dir_path_options() -> crate::fs::OpenOptions {
    use std::os::unix::fs::OpenOptionsExt;
    // Add `O_PATH` so that we can open directories that have search and not
    // read permission.
    crate::posish::fs::dir_options()
        .custom_flags(libc::O_PATH)
        .clone()
}

// In theory we could optimize `link` using `openat2` with `O_PATH` and
// `linkat` with `AT_EMPTY_PATH`, however that requires `CAP_DAC_READ_SEARCH`,
// so it isn't very widely applicable.