minix/servers/rs
David van Moolenbroek b8b8f537bd IPC privileges fixes
Kernel:
o Remove s_ipc_sendrec, instead using s_ipc_to for all send primitives
o Centralize s_ipc_to bit manipulation,
  - disallowing assignment of bits pointing to unused priv structs;
  - preventing send-to-self by not setting bit for own priv struct;
  - preserving send mask matrix symmetry in all cases
o Add IPC send mask checks to SENDA, which were missing entirely somehow
o Slightly improve IPC stats accounting for SENDA
o Remove SYSTEM from user processes' send mask
o Half-fix the dependency between boot image order and process numbers,
  - correcting the table order of the boot processes;
  - documenting the order requirement needed for proper send masks;
  - warning at boot time if the order is violated

RS:
o Add support in /etc/drivers.conf for servers that talk to user processes,
  - disallowing IPC to user processes if no "ipc" field is present
  - adding a special "USER" label to explicitly allow IPC to user processes
o Always apply IPC masks when specified; remove -i flag from service(8)
o Use kernel send mask symmetry to delay adding IPC permissions for labels
  that do not exist yet, adding them to that label's process upon creation
o Add VM to ipc permissions list for rtl8139 and fxp in drivers.conf

Left to future fixes:
o Removal of the table order vs process numbers dependency altogether,
  possibly using per-process send list structures as used for SYSTEM calls
o Proper assignment of send masks to boot processes;
  some of the assigned (~0) masks are much wider than necessary
o Proper assignment of IPC send masks for many more servers in drivers.conf
o Removal of the debugging warning about the now legitimate case where RS's
  add_forward_ipc cannot find the IPC destination's label yet
2009-07-02 16:25:31 +00:00
..
exec.c Basic VM and other minor improvements. 2008-11-19 12:26:10 +00:00
inc.h Split of architecture-dependent and -independent functions for i386, 2006-12-22 15:22:27 +00:00
main.c Reenable RS table dump from IS (Shift+F6) 2009-05-08 12:38:14 +00:00
Makefile RS needs a bit more memory 2009-01-14 08:55:48 +00:00
manager.c IPC privileges fixes 2009-07-02 16:25:31 +00:00
manager.h Support for restricting limiting IPC to a set of endpoints. Not enabled by 2008-02-21 16:20:22 +00:00
proto.h (Incomplete) support for access control in PCI (pci_set_acl). 2006-10-20 15:01:32 +00:00
service.c IPC privileges fixes 2009-07-02 16:25:31 +00:00