capng_c 0.1.4 → 0.1.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1eaea356dec8a2e8049a45af2c57d5839e661f64cfcaa2379cb5f27e69ab6ff4
-  data.tar.gz: a900c6d4381d353872be092de3e3be68ae311c6c0a43a534da4800eb89b3bada
+  metadata.gz: 46ab5a21fef03d5b25db0124526add7f625acc865ae10da0f8614b6290b5aec0
+  data.tar.gz: cae7565475f00217336124b3c1d0bad6fd3772470e3c8e2605ebac09bac87829
 SHA512:
-  metadata.gz: de48892bc4462b41a9d47eeccaf1397d62c3e03c8e6138600bec281ab4bf2b34b3d8352449bf52b2fe2fe7cbdd1717203d27d5d623e1e3cd3805bc119d031119
-  data.tar.gz: 6f4310683b133bcfb366366c670b68f8ad24eb6eb9065eb3c09a9d8b66e32106eeb38ac508dfd13a8d680d00ed74ba17618c25127f0dd0ecf0db199e2b0371d3
+  metadata.gz: 90fab6a90550512222604afee7896c75b766559d39f3288cad6191fb5b1192f080efc4bec6deef2c00377da4f7e8d129ec928191d67fa9277aac505652064b59
+  data.tar.gz: eee3466a6e594b8b5d4fa1835c7650a6d7669cb20be1410c32c8e0b2d878d197263848ec2f1ea7923088428611a78400569f9be55ea16a4c0115ee3b6cd8547d

data/README.md

@@ -20,6 +20,10 @@ Or install it yourself as:
 
     $ gem install capng_c
 
+## Usage
+
+The usage examples are put in [example directory](example).
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. You can also run `bin/console` for an interactive prompt that will allow you to experiment.

data/capng_c.gemspec

@@ -11,7 +11,7 @@ Gem::Specification.new do |spec|
   spec.summary       = %q{libcap-ng bindings for Ruby.}
   spec.description   = spec.summary
   spec.homepage      = "https://github.com/cosmo0920/cap-ng_c"
-
+  spec.license       = "Apache-2.0"
   spec.metadata["allowed_push_host"] = "https://rubygems.org"
 
   spec.metadata["homepage_uri"] = spec.homepage

data/example/process_capability_without_root.rb

@@ -0,0 +1,36 @@
+# Copyright 2020- Hiroshi Hatake
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+
+#     http://www.apache.org/licenses/LICENSE-2.0
+
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'capng'
+
+capng = CapNG.new(:current_process)
+unless capng.have_capability?(:effective, :dac_read_search)
+  puts "This example needs to setup :dac_read_search capability on running Ruby executable."
+  exit 2
+end
+
+print = CapNG::Print.new
+puts "capability: #{print.caps_text(:buffer, :effective)}"
+target_file = ARGV[0] || "/var/log/syslog"
+
+path = "/var/log/syslog"
+unless File.readable?(path)
+  puts "-----unreadable!!!!-----\ntarget: #{target_file}"
+end
+if capng.have_capability?(:effective, :dac_read_search)
+  contents = File.read(target_file)
+  if contents.length >= 0
+    puts "succeeded to read: #{target_file} w/o root user"
+  end
+end

data/ext/capng/enum.c

@@ -55,5 +55,8 @@ void Init_capng_enum(VALUE rb_cCapNG)
   rb_define_const(rb_mFlags, "NO_FLAG", LONG2NUM(CAPNG_NO_FLAG));
   rb_define_const(rb_mFlags, "DROP_SUPP_GRP", LONG2NUM(CAPNG_DROP_SUPP_GRP));
   rb_define_const(rb_mFlags, "CLEAR_BOUNDING", LONG2NUM(CAPNG_CLEAR_BOUNDING));
+#if defined(CAPNG_INIT_SUPP_GRP)
+  // Ubuntu Trusty's libcap-ng-dev doesn't have CAPNG_INIT_SUPP_GRP constant.
   rb_define_const(rb_mFlags, "INIT_SUPP_GRP", LONG2NUM(CAPNG_INIT_SUPP_GRP));
+#endif
 }

data/lib/capng/version.rb

@@ -1,3 +1,3 @@
 class CapNG
-  VERSION = "0.1.4"
+  VERSION = "0.1.5"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: capng_c
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.1.5
 platform: ruby
 authors:
 - Hiroshi Hatake
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-10-30 00:00:00.000000000 Z
+date: 2020-11-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -91,6 +91,7 @@ files:
 - capng_c.gemspec
 - example/file_capability.rb
 - example/process_capability.rb
+- example/process_capability_without_root.rb
 - ext/capng/capability.c
 - ext/capng/capng.c
 - ext/capng/capng.h
@@ -102,7 +103,8 @@ files:
 - lib/capng.rb
 - lib/capng/version.rb
 homepage: https://github.com/cosmo0920/cap-ng_c
-licenses: []
+licenses:
+- Apache-2.0
 metadata:
   allowed_push_host: https://rubygems.org
   homepage_uri: https://github.com/cosmo0920/cap-ng_c