minix/kernel
David van Moolenbroek b8b8f537bd IPC privileges fixes
Kernel:
o Remove s_ipc_sendrec, instead using s_ipc_to for all send primitives
o Centralize s_ipc_to bit manipulation,
  - disallowing assignment of bits pointing to unused priv structs;
  - preventing send-to-self by not setting bit for own priv struct;
  - preserving send mask matrix symmetry in all cases
o Add IPC send mask checks to SENDA, which were missing entirely somehow
o Slightly improve IPC stats accounting for SENDA
o Remove SYSTEM from user processes' send mask
o Half-fix the dependency between boot image order and process numbers,
  - correcting the table order of the boot processes;
  - documenting the order requirement needed for proper send masks;
  - warning at boot time if the order is violated

RS:
o Add support in /etc/drivers.conf for servers that talk to user processes,
  - disallowing IPC to user processes if no "ipc" field is present
  - adding a special "USER" label to explicitly allow IPC to user processes
o Always apply IPC masks when specified; remove -i flag from service(8)
o Use kernel send mask symmetry to delay adding IPC permissions for labels
  that do not exist yet, adding them to that label's process upon creation
o Add VM to ipc permissions list for rtl8139 and fxp in drivers.conf

Left to future fixes:
o Removal of the table order vs process numbers dependency altogether,
  possibly using per-process send list structures as used for SYSTEM calls
o Proper assignment of send masks to boot processes;
  some of the assigned (~0) masks are much wider than necessary
o Proper assignment of IPC send masks for many more servers in drivers.conf
o Removal of the debugging warning about the now legitimate case where RS's
  add_forward_ipc cannot find the IPC destination's label yet
2009-07-02 16:25:31 +00:00
..
arch/i386 Library call for cpu features; make kernel and vm use this to query cpu 2009-05-15 17:07:36 +00:00
system IPC privileges fixes 2009-07-02 16:25:31 +00:00
clock.c prototype 2009-01-22 17:09:45 +00:00
config.h moved type and constants for random data to include file; 2009-04-02 15:24:44 +00:00
const.h moved type and constants for random data to include file; 2009-04-02 15:24:44 +00:00
debug.c more sanity checking. sanity checking disabled by default. 2009-05-12 11:35:01 +00:00
debug.h Library call for cpu features; make kernel and vm use this to query cpu 2009-05-15 17:07:36 +00:00
glo.h moved type and constants for random data to include file; 2009-04-02 15:24:44 +00:00
interrupt.c Kernel interrupt hook management fixes: 2009-05-07 14:52:07 +00:00
ipc.h Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
kernel.h Split of architecture-dependent and -independent functions for i386, 2006-12-22 15:22:27 +00:00
main.c IPC privileges fixes 2009-07-02 16:25:31 +00:00
Makefile Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
priv.h IPC privileges fixes 2009-07-02 16:25:31 +00:00
proc.c IPC privileges fixes 2009-07-02 16:25:31 +00:00
proc.h more sanity checking. sanity checking disabled by default. 2009-05-12 11:35:01 +00:00
profile.c Don't declare the cprof buf if CPROFILE isn't on. 2009-02-06 16:31:28 +00:00
profile.h cprofile not conditional 2009-01-09 21:44:52 +00:00
proto.h IPC privileges fixes 2009-07-02 16:25:31 +00:00
start.c use #include name for servarname 2009-01-11 23:45:29 +00:00
system.c IPC privileges fixes 2009-07-02 16:25:31 +00:00
system.h cprofile not conditional 2009-01-09 21:44:52 +00:00
table.c IPC privileges fixes 2009-07-02 16:25:31 +00:00
type.h moved type and constants for random data to include file; 2009-04-02 15:24:44 +00:00
utility.c . new kernel call sysctl for generic unprivileged system operations; 2009-01-26 17:43:59 +00:00
vm.h Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00