Index: kernel/generic/include/security/cap.h =================================================================== --- kernel/generic/include/security/cap.h (revision 6b10dab6510950964fc02ac960103bbaedf76314) +++ (revision ) @@ -1,94 +1,0 @@ -/* - * Copyright (c) 2006 Jakub Jermar - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * - * - Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * - Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - The name of the author may not be used to endorse or promote products - * derived from this software without specific prior written permission. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR - * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES - * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. - * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, - * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT - * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, - * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY - * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT - * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF - * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - */ - -/** @addtogroup generic - * @{ - */ -/** @file - */ - -/** - * @file - * @brief Capabilities definitions. - * - * Capabilities represent virtual rights that entitle their - * holder to perform certain security sensitive tasks. - * - * Each task can have arbitrary combination of the capabilities - * defined in this file. Therefore, they are required to be powers - * of two. - */ - -#ifndef __CAP_H__ -#define __CAP_H__ - -#include - -/** - * CAP_CAP allows its holder to grant/revoke arbitrary - * privilege to/from other tasks. - */ -#define CAP_CAP (1 << 0) - -/** - * CAP_MEM_MANAGER allows its holder to map physical memory - * to other tasks. - */ -#define CAP_MEM_MANAGER (1 << 1) - -/** - * CAP_IO_MANAGER allows its holder to access I/O space - * to other tasks. - */ -#define CAP_IO_MANAGER (1 << 2) - -/** - * CAP_IRQ_REG entitles its holder to register IRQ handlers. - */ -#define CAP_IRQ_REG (1 << 3) - -typedef uint32_t cap_t; - -#ifdef __32_BITS__ - -extern sysarg_t sys_cap_grant(sysarg64_t *, cap_t); -extern sysarg_t sys_cap_revoke(sysarg64_t *, cap_t); - -#endif /* __32_BITS__ */ - -#ifdef __64_BITS__ - -extern sysarg_t sys_cap_grant(sysarg_t, cap_t); -extern sysarg_t sys_cap_revoke(sysarg_t, cap_t); - -#endif /* __64_BITS__ */ - -#endif - -/** @} - */ Index: kernel/generic/include/security/perm.h =================================================================== --- kernel/generic/include/security/perm.h (revision 316795ca7a45ed0fa2047deabebd675b9458618f) +++ kernel/generic/include/security/perm.h (revision 316795ca7a45ed0fa2047deabebd675b9458618f) @@ -0,0 +1,92 @@ +/* + * Copyright (c) 2006 Jakub Jermar + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + * - Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * - Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * - The name of the author may not be used to endorse or promote products + * derived from this software without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR + * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES + * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. + * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, + * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT + * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF + * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + */ + +/** @addtogroup generic + * @{ + */ +/** @file + */ + +/** + * @file + * @brief Task permissions definitions. + * + * Permissions represent virtual rights that entitle their + * holder to perform certain security sensitive tasks. + * + * Each task can have arbitrary combination of the permissions + * defined in this file. Therefore, they are required to be powers + * of two. + */ + +#ifndef __PERM_H__ +#define __PERM_H__ + +#include + +/** + * PERM_PERM allows its holder to grant/revoke arbitrary permission to/from + * other tasks. + */ +#define PERM_PERM (1 << 0) + +/** + * PERM_MEM_MANAGER allows its holder to map physical memory to other tasks. + */ +#define PERM_MEM_MANAGER (1 << 1) + +/** + * PERM_IO_MANAGER allows its holder to access I/O space to other tasks. + */ +#define PERM_IO_MANAGER (1 << 2) + +/** + * PERM_IRQ_REG entitles its holder to register IRQ handlers. + */ +#define PERM_IRQ_REG (1 << 3) + +typedef uint32_t perm_t; + +#ifdef __32_BITS__ + +extern sysarg_t sys_perm_grant(sysarg64_t *, perm_t); +extern sysarg_t sys_perm_revoke(sysarg64_t *, perm_t); + +#endif /* __32_BITS__ */ + +#ifdef __64_BITS__ + +extern sysarg_t sys_perm_grant(sysarg_t, perm_t); +extern sysarg_t sys_perm_revoke(sysarg_t, perm_t); + +#endif /* __64_BITS__ */ + +#endif + +/** @} + */