WIP: file system sandboxing

Signed-off-by: Leah Rowe <leah@libreboot.org>

1 files changed, 11 insertions, 4 deletions

diff --git a/util/nvmutil/include/common.h b/util/nvmutil/include/common.h
index a118e5f0..cb148368 100644
--- a/util/nvmutil/include/common.h
+++ b/util/nvmutil/include/common.h
@@ -299,6 +299,10 @@ struct xstate {
 	int cat;
 };
 
+struct filesystem {
+	int rootfd;
+};
+
 struct xstate *xstart(int argc, char *argv[]);
 struct xstate *xstatus(void);
 
@@ -489,10 +493,13 @@ int secure_file(int *fd, struct stat *st,
     int do_lock, mode_t mode);
 int close_on_eintr(int fd);
 int fsync_on_eintr(int fd);
-int fs_resolve(const char *path, int flags);
-int fs_root_fd(void);
-int fs_mkdir_p_at(int dirfd, const char *path, mode_t mode,
-    struct stat *st_dir_initial);
+int fs_rename_at(int olddirfd, const char *old,
+             int newdirfd, const char *new);
+int fs_rm_rf_at(int dirfd, const char *path);
+int fs_mkdir_p(const char *path, mode_t mode);
+int fs_mkdir_p_at(int dirfd, const char *path, mode_t mode);
+int fs_open(const char *path, int flags);
+struct filesystem *rootfs(void);
 int fs_resolve_at(int dirfd, const char *path, int flags);
 int fs_next_component(const char **p,
     char *name, size_t namesz);