102 lines
2 KiB
Ruby
102 lines
2 KiB
Ruby
module BSD::Control
|
|
class Feature < Struct.new(:name, :enable, :disable)
|
|
##
|
|
# @return [Array<BSD::Control::Feature>]
|
|
# Returns an array of available features.
|
|
def self.available
|
|
BSD::Control::FFI.available_features
|
|
end
|
|
|
|
##
|
|
# Enables a feature for a given binary.
|
|
#
|
|
# @param [String] path
|
|
# The path to a binary.
|
|
#
|
|
# @return [Boolean]
|
|
# Returns true on success.
|
|
def enable!(path)
|
|
set!(path, BSD::Control::Enable)
|
|
end
|
|
|
|
##
|
|
# Disables a feature for a given binary.
|
|
#
|
|
# @param [String] path
|
|
# The path to a binary.
|
|
#
|
|
# @return [Boolean]
|
|
# Returns true on success.
|
|
def disable!(path)
|
|
set!(path, BSD::Control::Disable)
|
|
end
|
|
|
|
##
|
|
# @group Predicates
|
|
|
|
##
|
|
# @return [Boolean]
|
|
# Returns true for the pageexec feature.
|
|
def pageexec?
|
|
name == "pageexec"
|
|
end
|
|
|
|
##
|
|
# @return [Boolean]
|
|
# Returns true for the mprotect feature.
|
|
def mprotect?
|
|
name == "mprotect"
|
|
end
|
|
|
|
##
|
|
# @return [Boolean]
|
|
# Returns true for the segv-guard feature.
|
|
def segvguard?
|
|
name == "segvguard"
|
|
end
|
|
|
|
##
|
|
# @return [Boolean]
|
|
# Returns true for the ASLR feature.
|
|
def aslr?
|
|
name == "aslr"
|
|
end
|
|
|
|
##
|
|
# @return [Boolean]
|
|
# Returns true for the shlibrandom feature.
|
|
def shlibrandom?
|
|
name == "shlibrandom"
|
|
end
|
|
|
|
##
|
|
# @return [Boolean]
|
|
# Returns true for the disallow-map32bit feature.
|
|
def disallow_map32bit?
|
|
name == "disallow_map32bit"
|
|
end
|
|
|
|
##
|
|
# @return [Boolean]
|
|
# Returns true for the insecure kmod feature.
|
|
def insecure_kmod?
|
|
name == "insecure_kmod"
|
|
end
|
|
|
|
##
|
|
# @return [Boolean]
|
|
# Returns true for the harden SHM feature.
|
|
def harden_shm?
|
|
name == "harden_shm"
|
|
end
|
|
|
|
##
|
|
# @return [Boolean]
|
|
# Returns true for the prohibit ptrace capsicum feature.
|
|
def prohibit_ptrace_capsicum?
|
|
name == "prohibit_ptrace_capsicum"
|
|
end
|
|
|
|
# @endgroup
|
|
end
|
|
end
|