No description
Find a file
David van Moolenbroek 78d707cd26 VM: support for shared call mask ACLs
The VM server now manages its call masks such that all user processes
share the same call mask. As a result, an update for the call mask of
any user process will apply to all user processes. This is similar to
the privilege infrastructure employed by the kernel, and may serve as
a template for similar fine-grained restrictions in other servers.

Concretely, this patch fixes the problem of "service edit init" not
applying the given VM call mask to user processes started from RC
scripts during system startup.

In addition, this patch makes RS set a proper VM call mask for each
recovery script it spawns.

Change-Id: I520a30d85a0d3f3502d2b158293a2258825358cf
2013-08-08 23:22:58 +02:00
benchmarks Removing obsolete _MINIX define 2013-02-26 09:44:20 +00:00
bin remove utimes() workarounds 2013-04-12 18:55:40 +00:00
commands <a.out.h>, MINIX style: remove as obsolete 2013-08-06 11:43:35 +02:00
common Enable optional GCC install and GCC improvements 2013-07-12 14:22:03 +02:00
dist/nvi Termcap update, replacing elvis by nvi. 2013-01-24 07:44:38 +01:00
distrib Drop obsolete <minix/compiler.h> and <minix/crtso.h> 2013-08-07 16:28:39 +00:00
docs Allow install of binutils and import texinfo 2013-07-12 14:18:08 +02:00
drivers ahci: make 64-bit native 2013-08-08 17:36:41 +02:00
etc tps65217: driver for the TPS65217 PMIC 2013-08-05 10:22:59 -04:00
external Importing NetBSD "Kyua" test framework 2013-07-23 20:43:41 +02:00
gnu Allow install of binutils and import texinfo 2013-07-12 14:18:08 +02:00
include VM: support for shared call mask ACLs 2013-08-08 23:22:58 +02:00
kernel Some more 64bit function eradication. 2013-08-07 12:35:53 +00:00
lib VM: support for shared call mask ACLs 2013-08-08 23:22:58 +02:00
libexec re-import makewhatis 2013-06-25 09:51:45 +00:00
man Remove unmaintained "ack" size nm mdb 2013-08-06 10:14:09 +02:00
releasetools Importing NetBSD "Kyua" test framework 2013-07-23 20:43:41 +02:00
sbin ext2: annotate cache blocks with inode metadata 2013-04-26 15:39:07 +00:00
servers VM: support for shared call mask ACLs 2013-08-08 23:22:58 +02:00
share Importing NetBSD "Kyua" test framework 2013-07-23 20:43:41 +02:00
sys i2c: increase BUFLEN/CMDLEN to 128, add page flag. 2013-07-27 08:21:37 -04:00
test blocktest: make 64-bit native 2013-08-08 17:36:45 +02:00
tests Importing NetBSD "Kyua" test framework 2013-07-23 20:43:41 +02:00
tools Fix file permissions 2013-08-07 16:26:29 +00:00
usr.bin allow ldd mmap fallback 2013-06-12 07:05:11 +00:00
usr.sbin Importing usr.sbin/i2cscan 2013-07-15 11:11:13 -04:00
.gitignore gitignore: ignore some more generated files 2012-12-06 13:29:20 +00:00
.gitreview misc:Add gerrit code review support. 2013-01-16 09:44:16 +01:00
build.sh Reverting back to default value of MKARZERO 2013-01-17 10:03:58 +01:00
LICENSE Fix parameter parsing in cut 2010-01-21 10:16:05 +00:00
Makefile Importing NetBSD "Kyua" test framework 2013-07-23 20:43:41 +02:00