minix/kernel/system
David van Moolenbroek b8b8f537bd IPC privileges fixes
Kernel:
o Remove s_ipc_sendrec, instead using s_ipc_to for all send primitives
o Centralize s_ipc_to bit manipulation,
  - disallowing assignment of bits pointing to unused priv structs;
  - preventing send-to-self by not setting bit for own priv struct;
  - preserving send mask matrix symmetry in all cases
o Add IPC send mask checks to SENDA, which were missing entirely somehow
o Slightly improve IPC stats accounting for SENDA
o Remove SYSTEM from user processes' send mask
o Half-fix the dependency between boot image order and process numbers,
  - correcting the table order of the boot processes;
  - documenting the order requirement needed for proper send masks;
  - warning at boot time if the order is violated

RS:
o Add support in /etc/drivers.conf for servers that talk to user processes,
  - disallowing IPC to user processes if no "ipc" field is present
  - adding a special "USER" label to explicitly allow IPC to user processes
o Always apply IPC masks when specified; remove -i flag from service(8)
o Use kernel send mask symmetry to delay adding IPC permissions for labels
  that do not exist yet, adding them to that label's process upon creation
o Add VM to ipc permissions list for rtl8139 and fxp in drivers.conf

Left to future fixes:
o Removal of the table order vs process numbers dependency altogether,
  possibly using per-process send list structures as used for SYSTEM calls
o Proper assignment of send masks to boot processes;
  some of the assigned (~0) masks are much wider than necessary
o Proper assignment of IPC send masks for many more servers in drivers.conf
o Removal of the debugging warning about the now legitimate case where RS's
  add_forward_ipc cannot find the IPC destination's label yet
2009-07-02 16:25:31 +00:00
..
do_abort.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_copy.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_cprofile.c cprofile not conditional 2009-01-09 21:45:27 +00:00
do_devio.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_endksig.c Mostly bugfixes of bugs triggered by the test set. 2007-02-01 17:50:02 +00:00
do_exec.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_exit.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_fork.c Clear trace bit for child on fork. 2009-05-13 21:58:10 +00:00
do_getinfo.c moved type and constants for random data to include file; 2009-04-02 15:24:44 +00:00
do_getksig.c Mostly bugfixes of bugs triggered by the test set. 2007-02-01 17:50:02 +00:00
do_irqctl.c moved type and constants for random data to include file; 2009-04-02 15:24:44 +00:00
do_kill.c Don't allow sys_kill to SELF alltogether. 2007-02-23 13:01:55 +00:00
do_mapdma.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_memset.c Al's system call -> kernel call renaming 2005-10-14 08:58:59 +00:00
do_newmap.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_nice.c Mostly bugfixes of bugs triggered by the test set. 2007-02-01 17:50:02 +00:00
do_privctl.c IPC privileges fixes 2009-07-02 16:25:31 +00:00
do_profbuf.c cprofile not conditional 2009-01-09 21:45:27 +00:00
do_safecopy.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_segctl.c Split of architecture-dependent and -independent functions for i386, 2006-12-22 15:22:27 +00:00
do_setalarm.c 'proc number' is process slot, 'endpoint' are generation-aware process 2006-03-03 10:00:02 +00:00
do_setgrant.c Mostly bugfixes of bugs triggered by the test set. 2007-02-01 17:50:02 +00:00
do_sigreturn.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_sigsend.c fix compiler warning; missing memory range check 2009-02-05 13:00:03 +00:00
do_sprofile.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_stime.c Added do_stime.c, return boot time in do_times.c 2007-08-07 12:20:31 +00:00
do_sysctl.c moved stacktrace to sysctl, as vmctl is very privileged so can't 2009-01-27 12:54:33 +00:00
do_times.c Added do_stime.c, return boot time in do_times.c 2007-08-07 12:20:31 +00:00
do_trace.c trace fix contributed by Joren l'Ami 2009-04-02 11:38:23 +00:00
do_umap.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_unused.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_vcopy.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_vdevio.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
do_vm_setbuf.c New error codes for IPC errors. 2005-10-20 20:25:32 +00:00
do_vmctl.c moved stacktrace to sysctl, as vmctl is very privileged so can't 2009-01-27 12:54:33 +00:00
Makefile . new kernel call sysctl for generic unprivileged system operations; 2009-01-26 17:43:59 +00:00