diff options
| author | Werner Koch <wk@gnupg.org> | 2013-04-18 14:40:43 +0200 |
|---|---|---|
| committer | Werner Koch <wk@gnupg.org> | 2013-05-22 17:59:29 +0200 |
| commit | 2b8014af202c9e0f7619f7a4377f5eb752235220 (patch) | |
| tree | 16f4498cfa6823f13d00467444fc856c2896e799 /src/gcrypt.h.in | |
| parent | 05b3e2dda61d3d532a7f1ffd2487a85ed1c4f3ab (diff) | |
| download | libgcrypt-2b8014af202c9e0f7619f7a4377f5eb752235220.tar.gz | |
Add control commands to disable mlock and setuid dropping.
* src/gcrypt.h.in (GCRYCTL_DISABLE_LOCKED_SECMEM): New.
(GCRYCTL_DISABLE_PRIV_DROP): New.
* src/global.c (_gcry_vcontrol): Implement them.
* src/secmem.h (GCRY_SECMEM_FLAG_NO_MLOCK): New.
(GCRY_SECMEM_FLAG_NO_PRIV_DROP): New.
* src/secmem.c (no_mlock, no_priv_drop): New.
(_gcry_secmem_set_flags, _gcry_secmem_get_flags): Set and get them.
(lock_pool): Handle no_mlock and no_priv_drop.
Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'src/gcrypt.h.in')
| -rw-r--r-- | src/gcrypt.h.in | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/gcrypt.h.in b/src/gcrypt.h.in index f472b02b..27a29ec2 100644 --- a/src/gcrypt.h.in +++ b/src/gcrypt.h.in @@ -302,7 +302,9 @@ enum gcry_ctl_cmds GCRYCTL_DISABLE_HWF = 63, GCRYCTL_SET_ENFORCED_FIPS_FLAG = 64, GCRYCTL_SET_PREFERRED_RNG_TYPE = 65, - GCRYCTL_GET_CURRENT_RNG_TYPE = 66 + GCRYCTL_GET_CURRENT_RNG_TYPE = 66, + GCRYCTL_DISABLE_LOCKED_SECMEM = 67, + GCRYCTL_DISABLE_PRIV_DROP = 68 }; /* Perform various operations defined by CMD. */ |