/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License, Version 1.0 only
 * (the "License").  You may not use this file except in compliance
 * with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 *
 * Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */

#ifndef	_ALTPRIVSEP_H
#define	_ALTPRIVSEP_H

#pragma ident	"%Z%%M%	%I%	%E% SMI"

#ifdef __cplusplus
extern "C" {
#endif

#include <sys/types.h>
#include "auth.h"
#include "kex.h"

#define	APS_MSG_NEWKEYS_REQ	0
#define	APS_MSG_NEWKEYS_REP	1
#define	APS_MSG_RECORD_LOGIN	2
#define	APS_MSG_RECORD_LOGOUT	3

pid_t	altprivsep_start_monitor(Authctxt *authctxt);

void	altprivsep_do_monitor(Authctxt *authctxt, pid_t child_pid);
int	altprivsep_get_pipe_fd(void);
int	altprivsep_is_monitor(void);
int	altprivsep_started(void);

/* child-side handler of re-key packets */
void	altprivsep_rekey(int type, u_int32_t seq, void *ctxt);

/* monitor-side fatal_cleanup callbacks */
void	altprivsep_shutdown_sock(void *arg);

/* Calls _to_ monitor from unprivileged process */
void	altprivsep_process_input(Kex *kex, fd_set *rset);
void	altprivsep_get_newkeys(enum kex_modes mode);
void	altprivsep_record_login(pid_t pid, const char *ttyname);
void	altprivsep_record_logout(pid_t pid);

/* Functions for use in the monitor */
void	aps_input_altpriv_msg(int type, u_int32_t seq, void *ctxt);

#ifdef __cplusplus
}
#endif

#endif /* _ALTPRIVSEP_H */