fbbd9655e5
Renumber cluase 4 to 3, per what everybody else did when BSD granted them permission to remove clause 3. My insistance on keeping the same numbering for legal reasons is too pedantic, so give up on that point. Submitted by: Jan Schaumann <jschauma@stevens.edu> Pull Request: https://github.com/freebsd/freebsd/pull/96
570 lines
15 KiB
Groff
570 lines
15 KiB
Groff
.\" Copyright (c) 1992, 1993
|
|
.\" The Regents of the University of California. All rights reserved.
|
|
.\"
|
|
.\" This code is derived from software contributed to Berkeley by
|
|
.\" Casey Leedom of Lawrence Livermore National Laboratory.
|
|
.\"
|
|
.\" Redistribution and use in source and binary forms, with or without
|
|
.\" modification, are permitted provided that the following conditions
|
|
.\" are met:
|
|
.\" 1. Redistributions of source code must retain the above copyright
|
|
.\" notice, this list of conditions and the following disclaimer.
|
|
.\" 2. Redistributions in binary form must reproduce the above copyright
|
|
.\" notice, this list of conditions and the following disclaimer in the
|
|
.\" documentation and/or other materials provided with the distribution.
|
|
.\" 3. Neither the name of the University nor the names of its contributors
|
|
.\" may be used to endorse or promote products derived from this software
|
|
.\" without specific prior written permission.
|
|
.\"
|
|
.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
.\" ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
.\" SUCH DAMAGE.
|
|
.\"
|
|
.\" @(#)getcap.3 8.4 (Berkeley) 5/13/94
|
|
.\" $FreeBSD$
|
|
.\"
|
|
.Dd March 22, 2002
|
|
.Dt GETCAP 3
|
|
.Os
|
|
.Sh NAME
|
|
.Nm cgetent ,
|
|
.Nm cgetset ,
|
|
.Nm cgetmatch ,
|
|
.Nm cgetcap ,
|
|
.Nm cgetnum ,
|
|
.Nm cgetstr ,
|
|
.Nm cgetustr ,
|
|
.Nm cgetfirst ,
|
|
.Nm cgetnext ,
|
|
.Nm cgetclose
|
|
.Nd capability database access routines
|
|
.Sh LIBRARY
|
|
.Lb libc
|
|
.Sh SYNOPSIS
|
|
.In stdlib.h
|
|
.Ft int
|
|
.Fn cgetent "char **buf" "char **db_array" "const char *name"
|
|
.Ft int
|
|
.Fn cgetset "const char *ent"
|
|
.Ft int
|
|
.Fn cgetmatch "const char *buf" "const char *name"
|
|
.Ft char *
|
|
.Fn cgetcap "char *buf" "const char *cap" "int type"
|
|
.Ft int
|
|
.Fn cgetnum "char *buf" "const char *cap" "long *num"
|
|
.Ft int
|
|
.Fn cgetstr "char *buf" "const char *cap" "char **str"
|
|
.Ft int
|
|
.Fn cgetustr "char *buf" "const char *cap" "char **str"
|
|
.Ft int
|
|
.Fn cgetfirst "char **buf" "char **db_array"
|
|
.Ft int
|
|
.Fn cgetnext "char **buf" "char **db_array"
|
|
.Ft int
|
|
.Fn cgetclose "void"
|
|
.Sh DESCRIPTION
|
|
The
|
|
.Fn cgetent
|
|
function extracts the capability
|
|
.Fa name
|
|
from the database specified by the
|
|
.Dv NULL
|
|
terminated file array
|
|
.Fa db_array
|
|
and returns a pointer to a
|
|
.Xr malloc 3 Ns \&'d
|
|
copy of it in
|
|
.Fa buf .
|
|
The
|
|
.Fn cgetent
|
|
function will first look for files ending in
|
|
.Pa .db
|
|
(see
|
|
.Xr cap_mkdb 1 )
|
|
before accessing the ASCII file.
|
|
The
|
|
.Fa buf
|
|
argument
|
|
must be retained through all subsequent calls to
|
|
.Fn cgetmatch ,
|
|
.Fn cgetcap ,
|
|
.Fn cgetnum ,
|
|
.Fn cgetstr ,
|
|
and
|
|
.Fn cgetustr ,
|
|
but may then be
|
|
.Xr free 3 Ns \&'d .
|
|
On success 0 is returned, 1 if the returned
|
|
record contains an unresolved
|
|
.Ic tc
|
|
expansion,
|
|
\-1 if the requested record could not be found,
|
|
\-2 if a system error was encountered (could not open/read a file, etc.) also
|
|
setting
|
|
.Va errno ,
|
|
and \-3 if a potential reference loop is detected (see
|
|
.Ic tc=
|
|
comments below).
|
|
.Pp
|
|
The
|
|
.Fn cgetset
|
|
function enables the addition of a character buffer containing a single capability
|
|
record entry
|
|
to the capability database.
|
|
Conceptually, the entry is added as the first ``file'' in the database, and
|
|
is therefore searched first on the call to
|
|
.Fn cgetent .
|
|
The entry is passed in
|
|
.Fa ent .
|
|
If
|
|
.Fa ent
|
|
is
|
|
.Dv NULL ,
|
|
the current entry is removed from the database.
|
|
A call to
|
|
.Fn cgetset
|
|
must precede the database traversal.
|
|
It must be called before the
|
|
.Fn cgetent
|
|
call.
|
|
If a sequential access is being performed (see below), it must be called
|
|
before the first sequential access call
|
|
.Po Fn cgetfirst
|
|
or
|
|
.Fn cgetnext
|
|
.Pc ,
|
|
or be directly preceded by a
|
|
.Fn cgetclose
|
|
call.
|
|
On success 0 is returned and \-1 on failure.
|
|
.Pp
|
|
The
|
|
.Fn cgetmatch
|
|
function will return 0 if
|
|
.Fa name
|
|
is one of the names of the capability record
|
|
.Fa buf ,
|
|
\-1 if
|
|
not.
|
|
.Pp
|
|
The
|
|
.Fn cgetcap
|
|
function searches the capability record
|
|
.Fa buf
|
|
for the capability
|
|
.Fa cap
|
|
with type
|
|
.Fa type .
|
|
A
|
|
.Fa type
|
|
is specified using any single character.
|
|
If a colon (`:') is used, an
|
|
untyped capability will be searched for (see below for explanation of
|
|
types).
|
|
A pointer to the value of
|
|
.Fa cap
|
|
in
|
|
.Fa buf
|
|
is returned on success,
|
|
.Dv NULL
|
|
if the requested capability could not be
|
|
found.
|
|
The end of the capability value is signaled by a `:' or
|
|
.Tn ASCII
|
|
.Dv NUL
|
|
(see below for capability database syntax).
|
|
.Pp
|
|
The
|
|
.Fn cgetnum
|
|
function retrieves the value of the numeric capability
|
|
.Fa cap
|
|
from the capability record pointed to by
|
|
.Fa buf .
|
|
The numeric value is returned in the
|
|
.Ft long
|
|
pointed to by
|
|
.Fa num .
|
|
0 is returned on success, \-1 if the requested numeric capability could not
|
|
be found.
|
|
.Pp
|
|
The
|
|
.Fn cgetstr
|
|
function retrieves the value of the string capability
|
|
.Fa cap
|
|
from the capability record pointed to by
|
|
.Fa buf .
|
|
A pointer to a decoded,
|
|
.Dv NUL
|
|
terminated,
|
|
.Xr malloc 3 Ns \&'d
|
|
copy of the string is returned in the
|
|
.Ft char *
|
|
pointed to by
|
|
.Fa str .
|
|
The number of characters in the decoded string not including the trailing
|
|
.Dv NUL
|
|
is returned on success, \-1 if the requested string capability could not
|
|
be found, \-2 if a system error was encountered (storage allocation
|
|
failure).
|
|
.Pp
|
|
The
|
|
.Fn cgetustr
|
|
function is identical to
|
|
.Fn cgetstr
|
|
except that it does not expand special characters, but rather returns each
|
|
character of the capability string literally.
|
|
.Pp
|
|
The
|
|
.Fn cgetfirst
|
|
and
|
|
.Fn cgetnext
|
|
functions comprise a function group that provides for sequential
|
|
access of the
|
|
.Dv NULL
|
|
pointer terminated array of file names,
|
|
.Fa db_array .
|
|
The
|
|
.Fn cgetfirst
|
|
function returns the first record in the database and resets the access
|
|
to the first record.
|
|
The
|
|
.Fn cgetnext
|
|
function returns the next record in the database with respect to the
|
|
record returned by the previous
|
|
.Fn cgetfirst
|
|
or
|
|
.Fn cgetnext
|
|
call.
|
|
If there is no such previous call, the first record in the database is
|
|
returned.
|
|
Each record is returned in a
|
|
.Xr malloc 3 Ns \&'d
|
|
copy pointed to by
|
|
.Fa buf .
|
|
.Ic Tc
|
|
expansion is done (see
|
|
.Ic tc=
|
|
comments below).
|
|
Upon completion of the database 0 is returned, 1 is returned upon successful
|
|
return of record with possibly more remaining (we have not reached the end of
|
|
the database yet), 2 is returned if the record contains an unresolved
|
|
.Ic tc
|
|
expansion, \-1 is returned if a system error occurred, and \-2
|
|
is returned if a potential reference loop is detected (see
|
|
.Ic tc=
|
|
comments below).
|
|
Upon completion of database (0 return) the database is closed.
|
|
.Pp
|
|
The
|
|
.Fn cgetclose
|
|
function closes the sequential access and frees any memory and file descriptors
|
|
being used.
|
|
Note that it does not erase the buffer pushed by a call to
|
|
.Fn cgetset .
|
|
.Sh CAPABILITY DATABASE SYNTAX
|
|
Capability databases are normally
|
|
.Tn ASCII
|
|
and may be edited with standard
|
|
text editors.
|
|
Blank lines and lines beginning with a `#' are comments
|
|
and are ignored.
|
|
Lines ending with a `\|\e' indicate that the next line
|
|
is a continuation of the current line; the `\|\e' and following newline
|
|
are ignored.
|
|
Long lines are usually continued onto several physical
|
|
lines by ending each line except the last with a `\|\e'.
|
|
.Pp
|
|
Capability databases consist of a series of records, one per logical
|
|
line.
|
|
Each record contains a variable number of `:'-separated fields
|
|
(capabilities).
|
|
Empty fields consisting entirely of white space
|
|
characters (spaces and tabs) are ignored.
|
|
.Pp
|
|
The first capability of each record specifies its names, separated by `|'
|
|
characters.
|
|
These names are used to reference records in the database.
|
|
By convention, the last name is usually a comment and is not intended as
|
|
a lookup tag.
|
|
For example, the
|
|
.Em vt100
|
|
record from the
|
|
.Xr termcap 5
|
|
database begins:
|
|
.Pp
|
|
.Dl "d0\||\|vt100\||\|vt100-am\||\|vt100am\||\|dec vt100:"
|
|
.Pp
|
|
giving four names that can be used to access the record.
|
|
.Pp
|
|
The remaining non-empty capabilities describe a set of (name, value)
|
|
bindings, consisting of a names optionally followed by a typed value:
|
|
.Pp
|
|
.Bl -tag -width "nameTvalue" -compact
|
|
.It name
|
|
typeless [boolean] capability
|
|
.Em name No "is present [true]"
|
|
.It name Ns Em \&T Ns value
|
|
capability
|
|
.Pq Em name , \&T
|
|
has value
|
|
.Em value
|
|
.It name@
|
|
no capability
|
|
.Em name No exists
|
|
.It name Ns Em T Ns \&@
|
|
capability
|
|
.Pq Em name , T
|
|
does not exist
|
|
.El
|
|
.Pp
|
|
Names consist of one or more characters.
|
|
Names may contain any character
|
|
except `:', but it is usually best to restrict them to the printable
|
|
characters and avoid use of graphics like `#', `=', `%', `@', etc.
|
|
Types
|
|
are single characters used to separate capability names from their
|
|
associated typed values.
|
|
Types may be any character except a `:'.
|
|
Typically, graphics like `#', `=', `%', etc.\& are used.
|
|
Values may be any
|
|
number of characters and may contain any character except `:'.
|
|
.Sh CAPABILITY DATABASE SEMANTICS
|
|
Capability records describe a set of (name, value) bindings.
|
|
Names may
|
|
have multiple values bound to them.
|
|
Different values for a name are
|
|
distinguished by their
|
|
.Fa types .
|
|
The
|
|
.Fn cgetcap
|
|
function will return a pointer to a value of a name given the capability
|
|
name and the type of the value.
|
|
.Pp
|
|
The types `#' and `=' are conventionally used to denote numeric and
|
|
string typed values, but no restriction on those types is enforced.
|
|
The
|
|
functions
|
|
.Fn cgetnum
|
|
and
|
|
.Fn cgetstr
|
|
can be used to implement the traditional syntax and semantics of `#'
|
|
and `='.
|
|
Typeless capabilities are typically used to denote boolean objects with
|
|
presence or absence indicating truth and false values respectively.
|
|
This interpretation is conveniently represented by:
|
|
.Pp
|
|
.Dl "(getcap(buf, name, ':') != NULL)"
|
|
.Pp
|
|
A special capability,
|
|
.Ic tc= name ,
|
|
is used to indicate that the record specified by
|
|
.Fa name
|
|
should be substituted for the
|
|
.Ic tc
|
|
capability.
|
|
.Ic Tc
|
|
capabilities may interpolate records which also contain
|
|
.Ic tc
|
|
capabilities and more than one
|
|
.Ic tc
|
|
capability may be used in a record.
|
|
A
|
|
.Ic tc
|
|
expansion scope (i.e., where the argument is searched for) contains the
|
|
file in which the
|
|
.Ic tc
|
|
is declared and all subsequent files in the file array.
|
|
.Pp
|
|
When a database is searched for a capability record, the first matching
|
|
record in the search is returned.
|
|
When a record is scanned for a
|
|
capability, the first matching capability is returned; the capability
|
|
.Ic :nameT@:
|
|
will hide any following definition of a value of type
|
|
.Em T
|
|
for
|
|
.Fa name ;
|
|
and the capability
|
|
.Ic :name@:
|
|
will prevent any following values of
|
|
.Fa name
|
|
from being seen.
|
|
.Pp
|
|
These features combined with
|
|
.Ic tc
|
|
capabilities can be used to generate variations of other databases and
|
|
records by either adding new capabilities, overriding definitions with new
|
|
definitions, or hiding following definitions via `@' capabilities.
|
|
.Sh EXAMPLES
|
|
.Bd -unfilled -offset indent
|
|
example\||\|an example of binding multiple values to names:\e
|
|
:foo%bar:foo^blah:foo@:\e
|
|
:abc%xyz:abc^frap:abc$@:\e
|
|
:tc=more:
|
|
.Ed
|
|
.Pp
|
|
The capability foo has two values bound to it (bar of type `%' and blah of
|
|
type `^') and any other value bindings are hidden.
|
|
The capability abc
|
|
also has two values bound but only a value of type `$' is prevented from
|
|
being defined in the capability record more.
|
|
.Bd -unfilled -offset indent
|
|
file1:
|
|
new\||\|new_record\||\|a modification of "old":\e
|
|
:fript=bar:who-cares@:tc=old:blah:tc=extensions:
|
|
file2:
|
|
old\||\|old_record\||\|an old database record:\e
|
|
:fript=foo:who-cares:glork#200:
|
|
.Ed
|
|
.Pp
|
|
The records are extracted by calling
|
|
.Fn cgetent
|
|
with file1 preceding file2.
|
|
In the capability record new in file1, fript=bar overrides the definition
|
|
of fript=foo interpolated from the capability record old in file2,
|
|
who-cares@ prevents the definition of any who-cares definitions in old
|
|
from being seen, glork#200 is inherited from old, and blah and anything
|
|
defined by the record extensions is added to those definitions in old.
|
|
Note that the position of the fript=bar and who-cares@ definitions before
|
|
tc=old is important here.
|
|
If they were after, the definitions in old
|
|
would take precedence.
|
|
.Sh CGETNUM AND CGETSTR SYNTAX AND SEMANTICS
|
|
Two types are predefined by
|
|
.Fn cgetnum
|
|
and
|
|
.Fn cgetstr :
|
|
.Pp
|
|
.Bl -tag -width "nameXnumber" -compact
|
|
.It Em name Ns \&# Ns Em number
|
|
numeric capability
|
|
.Em name
|
|
has value
|
|
.Em number
|
|
.It Em name Ns = Ns Em string
|
|
string capability
|
|
.Em name
|
|
has value
|
|
.Em string
|
|
.It Em name Ns \&#@
|
|
the numeric capability
|
|
.Em name
|
|
does not exist
|
|
.It Em name Ns \&=@
|
|
the string capability
|
|
.Em name
|
|
does not exist
|
|
.El
|
|
.Pp
|
|
Numeric capability values may be given in one of three numeric bases.
|
|
If the number starts with either
|
|
.Ql 0x
|
|
or
|
|
.Ql 0X
|
|
it is interpreted as a hexadecimal number (both upper and lower case a-f
|
|
may be used to denote the extended hexadecimal digits).
|
|
Otherwise, if the number starts with a
|
|
.Ql 0
|
|
it is interpreted as an octal number.
|
|
Otherwise the number is interpreted as a decimal number.
|
|
.Pp
|
|
String capability values may contain any character.
|
|
Non-printable
|
|
.Dv ASCII
|
|
codes, new lines, and colons may be conveniently represented by the use
|
|
of escape sequences:
|
|
.Bl -column "\e\|X,X\e\|X" "(ASCII octal nnn)"
|
|
^X ('X' & 037) control-X
|
|
\e\|b, \e\|B (ASCII 010) backspace
|
|
\e\|t, \e\|T (ASCII 011) tab
|
|
\e\|n, \e\|N (ASCII 012) line feed (newline)
|
|
\e\|f, \e\|F (ASCII 014) form feed
|
|
\e\|r, \e\|R (ASCII 015) carriage return
|
|
\e\|e, \e\|E (ASCII 027) escape
|
|
\e\|c, \e\|C (:) colon
|
|
\e\|\e (\e\|) back slash
|
|
\e\|^ (^) caret
|
|
\e\|nnn (ASCII octal nnn)
|
|
.El
|
|
.Pp
|
|
A `\|\e' may be followed by up to three octal digits directly specifies
|
|
the numeric code for a character.
|
|
The use of
|
|
.Tn ASCII
|
|
.Dv NUL Ns s ,
|
|
while easily
|
|
encoded, causes all sorts of problems and must be used with care since
|
|
.Dv NUL Ns s
|
|
are typically used to denote the end of strings; many applications
|
|
use `\e\|200' to represent a
|
|
.Dv NUL .
|
|
.Sh DIAGNOSTICS
|
|
The
|
|
.Fn cgetent ,
|
|
.Fn cgetset ,
|
|
.Fn cgetmatch ,
|
|
.Fn cgetnum ,
|
|
.Fn cgetstr ,
|
|
.Fn cgetustr ,
|
|
.Fn cgetfirst ,
|
|
and
|
|
.Fn cgetnext
|
|
functions
|
|
return a value greater than or equal to 0 on success and a value less
|
|
than 0 on failure.
|
|
The
|
|
.Fn cgetcap
|
|
function returns a character pointer on success and a
|
|
.Dv NULL
|
|
on failure.
|
|
.Pp
|
|
The
|
|
.Fn cgetent ,
|
|
and
|
|
.Fn cgetset
|
|
functions may fail and set
|
|
.Va errno
|
|
for any of the errors specified for the library functions:
|
|
.Xr fopen 3 ,
|
|
.Xr fclose 3 ,
|
|
.Xr open 2 ,
|
|
and
|
|
.Xr close 2 .
|
|
.Pp
|
|
The
|
|
.Fn cgetent ,
|
|
.Fn cgetset ,
|
|
.Fn cgetstr ,
|
|
and
|
|
.Fn cgetustr
|
|
functions
|
|
may fail and set
|
|
.Va errno
|
|
as follows:
|
|
.Bl -tag -width Er
|
|
.It Bq Er ENOMEM
|
|
No memory to allocate.
|
|
.El
|
|
.Sh SEE ALSO
|
|
.Xr cap_mkdb 1 ,
|
|
.Xr malloc 3
|
|
.Sh BUGS
|
|
Colons (`:') cannot be used in names, types, or values.
|
|
.Pp
|
|
There are no checks for
|
|
.Ic tc Ns = Ns Ic name
|
|
loops in
|
|
.Fn cgetent .
|
|
.Pp
|
|
The buffer added to the database by a call to
|
|
.Fn cgetset
|
|
is not unique to the database but is rather prepended to any database used.
|