From: Julian Andres Klode <jak@debian.org>
Date: Wed, 24 Sep 2014 20:28:44 +0000 (+0200)
Subject: DropPrivs: Document what it does
X-Git-Tag: 1.1.exp3~1
X-Git-Url: https://git.saurik.com/apt.git/commitdiff_plain/13a28d8549015d2b55fadef450bc56327b4ca7a2?ds=inline;hp=--cc

DropPrivs: Document what it does

Git-Dch: ignore
---

13a28d8549015d2b55fadef450bc56327b4ca7a2
diff --git a/apt-pkg/contrib/fileutl.h b/apt-pkg/contrib/fileutl.h
index a8e255b86..9dd29eb9e 100644
--- a/apt-pkg/contrib/fileutl.h
+++ b/apt-pkg/contrib/fileutl.h
@@ -199,7 +199,17 @@ bool ExecWait(pid_t Pid,const char *Name,bool Reap = false);
 // check if the given file starts with a PGP cleartext signature
 bool StartsWithGPGClearTextSignature(std::string const &FileName);
 
-// process releated
+/**
+ * \brief Drop privileges
+ *
+ * Drop the privileges to the user _apt (or the one specified in
+ * APT::Sandbox::User). This does not set the supplementary group
+ * ids up correctly, it only uses the default group. Also prevent
+ * the process from gaining any new privileges afterwards, at least
+ * on Linux.
+ *
+ * \return true on success, false on failure with _error set
+ */
 bool DropPrivs();
 
 // File string manipulators