minix/servers
David van Moolenbroek c51cd5fe91 Server/driver protocols: no longer allow third-party copies.
Before safecopies, the IO_ENDPT and DL_ENDPT message fields were needed
to know which actual process to copy data from/to, as that process may
not always be the caller. Now that we have full safecopy support, these
fields have become useless for that purpose: the owner of the grant is
*always* the caller. Allowing the caller to supply another endpoint is
in fact dangerous, because the callee may then end up using a grant
from a third party. One could call this a variant of the confused
deputy problem.

From now on, safecopy calls should always use the caller's endpoint as
grant owner. This fully obsoletes the DL_ENDPT field in the
inet/ethernet protocol. IO_ENDPT has other uses besides identifying the
grant owner though. This patch renames IO_ENDPT to USER_ENDPT, not only
because that is a more fitting name (it should never be used for I/O
after all), but also in order to intentionally break any old system
source code outside the base system. If this patch breaks your code,
fixing it is fairly simple:

- DL_ENDPT should be replaced with m_source;
- IO_ENDPT should be replaced with m_source when used for safecopies;
- IO_ENDPT should be replaced with USER_ENDPT for any other use, e.g.
  when setting REP_ENDPT, matching requests in CANCEL calls, getting
  DEV_SELECT flags, and retrieving of the real user process's endpoint
  in DEV_OPEN.

The changes in this patch are binary backward compatible.
2011-04-11 17:35:05 +00:00
..
devman Added Device Manager (USB hotplug support) 2011-02-23 13:48:03 +00:00
ds <ansi.h> -> <minix/ansi.h> 2011-01-28 11:35:02 +00:00
ext2 Server/driver protocols: no longer allow third-party copies. 2011-04-11 17:35:05 +00:00
hgfs don't send FS_READY anymore 2010-11-24 16:29:50 +00:00
inet Server/driver protocols: no longer allow third-party copies. 2011-04-11 17:35:05 +00:00
init Shutdown changes for multiboot: CTRL-ALT-DEL resets, panic halts 2010-08-30 19:01:58 +00:00
ipc Fix a few compile time warnings 2010-07-02 12:41:19 +00:00
is is - no more getlocktimings. 2011-02-04 13:34:43 +00:00
iso9660fs Server/driver protocols: no longer allow third-party copies. 2011-04-11 17:35:05 +00:00
lwip Server/driver protocols: no longer allow third-party copies. 2011-04-11 17:35:05 +00:00
mfs Server/driver protocols: no longer allow third-party copies. 2011-04-11 17:35:05 +00:00
pfs Server/driver protocols: no longer allow third-party copies. 2011-04-11 17:35:05 +00:00
pm VM and kernel support for ELF 2011-02-26 23:00:55 +00:00
procfs procfs: only initialize the first time procfs is mounte 2011-02-22 18:03:33 +00:00
rs libexec: return physaddr info from ELF headers 2011-04-07 12:22:36 +00:00
sched <ansi.h> -> <minix/ansi.h> 2011-01-28 11:35:02 +00:00
vfs Server/driver protocols: no longer allow third-party copies. 2011-04-11 17:35:05 +00:00
vm remove some debugging output from vm/region.c 2011-03-16 11:57:35 +00:00
Makefile Added Device Manager (USB hotplug support) 2011-02-23 13:48:03 +00:00
Makefile.inc Makefile updates: 2010-06-11 16:05:36 +00:00