bsdcontrol.rb/lib/bsd/control/feature.rb

185 lines
3.8 KiB
Ruby

module BSD::Control
class Feature < Struct.new(:name, :context)
##
# @return [Array<BSD::Control::Feature>]
# Returns an array of available features.
def self.available
BSD::Control.available_features
end
##
# @group Actions
##
# Enables a feature for a given file.
#
# @param [String] path
# The path to a file.
#
# @raise [SystemCallError]
# Might raise a number of Errno exceptions.
#
# @return [Boolean]
# Returns true on success.
def enable!(path)
set!(path, 1)
end
##
# Disables a feature for a given file.
#
# @param [String] path
# The path to a file.
#
# @raise [SystemCallError]
# Might raise a number of Errno exceptions.
#
# @return [Boolean]
# Returns true on success.
def disable!(path)
set!(path, 0)
end
##
# @!method sysdef!(path)
# Restore system defaults for a given file.
#
# @param [String] path
# The path to a file.
#
# @raise [SystemCallError]
# Might raise a number of Errno exceptions.
#
# @return [Boolean]
# Returns true on success.
# @endgroup
##
# @group Queries
##
# @param [String] path
# The path to a file.
#
# @return [Boolean]
# Returns true when a feature is enabled for a given file.
def enabled?(path)
status(path) == :enabled
end
##
# @param [String] path
# The path to a file.
#
# @return [Boolean]
# Returns true when a feature is disabled for a given file.
def disabled?(path)
status(path) == :disabled
end
##
# @param [String] path
# The path to a file.
#
# @return [Boolean]
# Returns true when a feature is configured to use the system default.
def sysdef?(path)
status(path) == :sysdef
end
##
# @param [String] path
# The path to a file.
#
# @return [Boolean]
# Returns true when a feature is in an invalid state
# (eg: the feature is both enabled and disabled at the same time).
def invalid?(path)
status(path) == :invalid
end
##
# @!method status(path)
# @param [String] path
# The path to a file.
#
# @raise [SystemCallError]
# Might raise a number of Errno exceptions.
#
# @return [Symbol]
# Returns the status of a feature for a given file.
# Status could be: `:unknown`, `:enabled`, `:disabled`,
# `:sysdef`, or `:invalid`.
# @endgroup
##
# @group Predicates
##
# @return [Boolean]
# Returns true for the pageexec feature.
def pageexec?
name == "pageexec"
end
##
# @return [Boolean]
# Returns true for the mprotect feature.
def mprotect?
name == "mprotect"
end
##
# @return [Boolean]
# Returns true for the segv-guard feature.
def segvguard?
name == "segvguard"
end
##
# @return [Boolean]
# Returns true for the ASLR feature.
def aslr?
name == "aslr"
end
##
# @return [Boolean]
# Returns true for the shlibrandom feature.
def shlibrandom?
name == "shlibrandom"
end
##
# @return [Boolean]
# Returns true for the disallow-map32bit feature.
def disallow_map32bit?
name == "disallow_map32bit"
end
##
# @return [Boolean]
# Returns true for the insecure kmod feature.
def insecure_kmod?
name == "insecure_kmod"
end
##
# @return [Boolean]
# Returns true for the harden SHM feature.
def harden_shm?
name == "harden_shm"
end
##
# @return [Boolean]
# Returns true for the prohibit ptrace capsicum feature.
def prohibit_ptrace_capsicum?
name == "prohibit_ptrace_capsicum"
end
# @endgroup
end
end