[go: up one dir, main page]

caps 0.0.1

A pure-Rust library to work with Linux capabilities
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

extern crate caps;

#[test]
fn test_effective_has_cap() {
    caps::has_cap(None, caps::CapSet::Effective, caps::Capability::CAP_CHOWN).unwrap();
}

#[test]
fn test_effective_read() {
    caps::read(None, caps::CapSet::Effective).unwrap();
}

#[test]
fn test_effective_clear() {
    caps::clear(None, caps::CapSet::Effective).unwrap();
    let empty = caps::read(None, caps::CapSet::Effective).unwrap();
    assert_eq!(empty.len(), 0);
}

#[test]
fn test_effective_drop() {
    caps::drop(None, caps::CapSet::Effective, caps::Capability::CAP_CHOWN).unwrap();
    let no_eff = caps::has_cap(None, caps::CapSet::Effective, caps::Capability::CAP_CHOWN).unwrap();
    assert_eq!(no_eff, false);
}

#[test]
fn test_effective_raise() {
    let perm = caps::has_cap(None, caps::CapSet::Permitted, caps::Capability::CAP_CHOWN).unwrap();
    caps::drop(None, caps::CapSet::Effective, caps::Capability::CAP_CHOWN).unwrap();
    let r = caps::raise(None, caps::CapSet::Effective, caps::Capability::CAP_CHOWN);
    if perm {
        r.unwrap();
    } else {
        assert!(r.is_err());
    }
}

#[test]
fn test_effective_set() {
    let mut v = caps::CapsHashSet::new();
    caps::set(None, caps::CapSet::Effective, v.clone()).unwrap();
    let empty = caps::read(None, caps::CapSet::Effective).unwrap();
    assert_eq!(empty.len(), 0);
    v.insert(caps::Capability::CAP_CHOWN);
    caps::drop(None, caps::CapSet::Ambient, caps::Capability::CAP_CHOWN).unwrap();
    assert!(caps::set(None, caps::CapSet::Ambient, v).is_err());
}