Date: Thu, 9 Feb 2006 18:58:06 GMT From: Rob Deker <deker@FreeBSD.org> To: Perforce Change Reviews <perforce@FreeBSD.org> Subject: PERFORCE change 91445 for review Message-ID: <200602091858.k19Iw6va027576@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=91445 Change 91445 by deker@deker_build1.columbia.sparta.com on 2006/02/09 18:58:00 per millert: "Add mac_check_port_receive() entry point. Not currently implemented by any policy." Submitted by: millert Affected files ... .. //depot/projects/trustedbsd/sedarwin7/src/darwin/xnu/bsd/sys/mac_policy.h#12 edit Differences ... ==== //depot/projects/trustedbsd/sedarwin7/src/darwin/xnu/bsd/sys/mac_policy.h#12 (text+ko) ==== @@ -1994,6 +1994,25 @@ ); /** + @brief Access control check for receiving Mach messsages + @param task Label of the receiving task + @param port Label of the sending task + + Access control check for receiving messages. The two labels are locked. + + @warning This entry point can be invoked from many places inside the + kernel, with arbitrary other locks held. The implementation of this + entry point must not cause page faults, as those are handled by mach + messages. + + @return Return 0 if access is granted, non-zero otherwise. +*/ +typedef int mpo_check_port_receive_t( + struct label *task, + struct label *sender +); + +/** @brief Access control check for obtaining a receive right @param task Label of the receiving task @param port Label of the affected port @@ -4141,6 +4160,7 @@ mpo_check_port_send_t *mpo_check_port_send; mpo_check_port_make_send_t *mpo_check_port_make_send; mpo_check_port_copy_send_t *mpo_check_port_copy_send; + mpo_check_port_receive_t *mpo_check_port_receive; mpo_check_port_move_receive_t *mpo_check_port_move_receive; mpo_check_port_hold_send_t *mpo_check_port_hold_send; mpo_check_port_hold_receive_t *mpo_check_port_hold_receive;
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200602091858.k19Iw6va027576>