source: mainline/kernel/generic/include/cap/cap.h@ df721df

Last change on this file since df721df was fa3ed5b, checked in by Jiří Zárevúcky <zarevucky.jiri@…>, 12 months ago

Bulk clear capabilities when task terminates or is destroyed

  • Property mode set to 100644
File size: 4.1 KB
Line 
1/*
2 * Copyright (c) 2017 Jakub Jermar
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 *
9 * - Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * - Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 * - The name of the author may not be used to endorse or promote products
15 * derived from this software without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
18 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
19 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
21 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
22 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
23 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
24 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
26 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 */
28
29/** @addtogroup kernel_generic
30 * @{
31 */
32/** @file
33 */
34
35#ifndef KERN_CAP_H_
36#define KERN_CAP_H_
37
38#include <abi/cap.h>
39#include <adt/hash_table.h>
40#include <adt/hash.h>
41#include <adt/list.h>
42#include <atomic.h>
43#include <lib/ra.h>
44#include <lib/refcount.h>
45#include <synch/mutex.h>
46#include <typedefs.h>
47
48typedef enum {
49 CAP_STATE_FREE,
50 CAP_STATE_ALLOCATED,
51 CAP_STATE_PUBLISHED
52} cap_state_t;
53
54typedef enum {
55 KOBJECT_TYPE_CALL,
56 KOBJECT_TYPE_IRQ,
57 KOBJECT_TYPE_PHONE,
58 KOBJECT_TYPE_WAITQ,
59 KOBJECT_TYPE_MAX
60} kobject_type_t;
61
62struct task;
63
64struct call;
65struct irq;
66struct phone;
67struct waitq;
68
69typedef struct kobject_ops {
70 void (*destroy)(void *);
71} kobject_ops_t;
72
73extern kobject_ops_t *kobject_ops[];
74
75#define KOBJECT_OP(k) kobject_ops[(k)->type]
76
77/*
78 * Everything in kobject_t except for the atomic reference count, the capability
79 * list and its lock is imutable.
80 */
81typedef struct kobject {
82 kobject_type_t type;
83 atomic_refcount_t refcnt;
84
85 /** Mutex protecting caps_list */
86 mutex_t caps_list_lock;
87 /** List of published capabilities associated with the kobject */
88 list_t caps_list;
89
90 union {
91 void *raw;
92 struct call *call;
93 struct irq *irq;
94 struct phone *phone;
95 struct waitq *waitq;
96 };
97} kobject_t;
98
99/*
100 * A cap_t may only be accessed under the protection of the cap_info_t lock.
101 */
102typedef struct cap {
103 cap_state_t state;
104
105 struct task *task;
106 cap_handle_t handle;
107
108 /** Link to the kobject's list of capabilities. */
109 link_t kobj_link;
110
111 /* Link to the task's capabilities of the same kobject type. */
112 link_t type_link;
113
114 ht_link_t caps_link;
115
116 /* The underlying kernel object. */
117 kobject_t *kobject;
118} cap_t;
119
120typedef struct cap_info {
121 mutex_t lock;
122
123 list_t type_list[KOBJECT_TYPE_MAX];
124
125 hash_table_t caps;
126 ra_arena_t *handles;
127} cap_info_t;
128
129extern void caps_init(void);
130extern errno_t caps_task_alloc(struct task *);
131extern void caps_task_free(struct task *);
132extern void caps_task_clear(struct task *task);
133extern errno_t caps_task_init(struct task *);
134extern bool caps_apply_to_kobject_type(struct task *, kobject_type_t,
135 bool (*)(cap_t *, void *), void *);
136
137extern errno_t cap_alloc(struct task *, cap_handle_t *);
138extern void cap_publish(struct task *, cap_handle_t, kobject_t *);
139extern kobject_t *cap_unpublish(struct task *, cap_handle_t, kobject_type_t);
140extern void cap_revoke(kobject_t *);
141extern void cap_free(struct task *, cap_handle_t);
142
143extern kobject_t *kobject_alloc(unsigned int);
144extern void kobject_free(kobject_t *);
145extern void kobject_initialize(kobject_t *, kobject_type_t, void *);
146extern kobject_t *kobject_get(struct task *, cap_handle_t, kobject_type_t);
147extern void kobject_add_ref(kobject_t *);
148extern void kobject_put(kobject_t *);
149
150#endif
151
152/** @}
153 */
Note: See TracBrowser for help on using the repository browser.