Changeset 115 for trunk/include

Timestamp:

Aug 21, 2007, 10:22:59 PM (17 years ago)

Author:

rainer

Message:

Fix the problem that new suid/sgid file found by the file system check already will not be quarantined in the suid check (ticket #71).

Location:

trunk/include

Files:

• samhain.h (modified) (2 diffs)
• sh_hash.h (modified) (1 diff)

trunk/include/samhain.h

@@ -131 +131 @@
 #define SH_FFLAG_CHECKED   (1<<3)
 #define SH_FFLAG_REPORTED  (1<<3)
+#define SH_FFLAG_SUIDCHK   (1<<4)
 
 #define SH_FFLAG_ALLIGNORE_SET(a)   (((a) & SH_FFLAG_ALLIGNORE) != 0)
@@ -147 +148 @@
 #define SET_SH_FFLAG_REPORTED(a)    ((a) |= SH_FFLAG_REPORTED)
 #define CLEAR_SH_FFLAG_REPORTED(a)  ((a) &= ~SH_FFLAG_REPORTED)
+
+#define SH_FFLAG_SUIDCHK_SET(a)     (((a) & SH_FFLAG_SUIDCHK) != 0)
+#define SET_SH_FFLAG_SUIDCHK(a)     ((a) |= SH_FFLAG_SUIDCHK)
+#define CLEAR_SH_FFLAG_SUIDCHK(a)   ((a) &= ~SH_FFLAG_SUIDCHK)
 
 

trunk/include/sh_hash.h

@@ -84 +84 @@
 void sh_hash_pushdata_memory (file_type * theFile, char * fileHash);
 
+/* Get file flags from in-memory database
+ */
+int sh_hash_getflags (char * filename);
+
+/* Set file flags in in-memory database
+ */
+int sh_hash_setflags (char * filename, int flags);
+
+/* Set a file flag in in-memory database
+ */
+void sh_hash_addflag  (char * filename, int flag);
+
 /* Compare a file with its status in the database.
  */