diff options
| author | Werner Koch <wk@gnupg.org> | 2013-04-18 14:40:43 +0200 |
|---|---|---|
| committer | Werner Koch <wk@gnupg.org> | 2013-05-22 17:59:29 +0200 |
| commit | 2b8014af202c9e0f7619f7a4377f5eb752235220 (patch) | |
| tree | 16f4498cfa6823f13d00467444fc856c2896e799 /src/secmem.h | |
| parent | 05b3e2dda61d3d532a7f1ffd2487a85ed1c4f3ab (diff) | |
| download | libgcrypt-2b8014af202c9e0f7619f7a4377f5eb752235220.tar.gz | |
Add control commands to disable mlock and setuid dropping.
* src/gcrypt.h.in (GCRYCTL_DISABLE_LOCKED_SECMEM): New.
(GCRYCTL_DISABLE_PRIV_DROP): New.
* src/global.c (_gcry_vcontrol): Implement them.
* src/secmem.h (GCRY_SECMEM_FLAG_NO_MLOCK): New.
(GCRY_SECMEM_FLAG_NO_PRIV_DROP): New.
* src/secmem.c (no_mlock, no_priv_drop): New.
(_gcry_secmem_set_flags, _gcry_secmem_get_flags): Set and get them.
(lock_pool): Handle no_mlock and no_priv_drop.
Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'src/secmem.h')
| -rw-r--r-- | src/secmem.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/secmem.h b/src/secmem.h index 29e151af..3577381c 100644 --- a/src/secmem.h +++ b/src/secmem.h @@ -35,5 +35,7 @@ int _gcry_private_is_secure (const void *p); #define GCRY_SECMEM_FLAG_NO_WARNING (1 << 0) #define GCRY_SECMEM_FLAG_SUSPEND_WARNING (1 << 1) #define GCRY_SECMEM_FLAG_NOT_LOCKED (1 << 2) +#define GCRY_SECMEM_FLAG_NO_MLOCK (1 << 3) +#define GCRY_SECMEM_FLAG_NO_PRIV_DROP (1 << 4) #endif /* G10_SECMEM_H */ |