[kernel] Add capabilities to handles
This change finally adds capabilities to handles. Included changes: - j6_handle_t is now again 64 bits, with the highest 8 bits being a type code, and the next highest 24 bits being the capability mask, so that programs can check type/caps without calling the kernel. - The definitions grammar now includes a `capabilities [ ]` section on objects, to list what capabilities are relevant. - j6/caps.h is auto-generated from object capability lists - init_libj6 again sets __handle_self and __handle_sys, this is a bit of a hack. - A new syscall, j6_handle_list, will return the list of existing handles owned by the calling process. - syscall_verify.cpp.cog now actually checks that the needed capabilities exist on handles before allowing the call.
This commit is contained in:
@@ -2,6 +2,7 @@
|
||||
/// \file endpoint.h
|
||||
/// Definition of endpoint kobject types
|
||||
|
||||
#include <j6/caps.h>
|
||||
#include <j6/signals.h>
|
||||
#include <util/spinlock.h>
|
||||
#include <util/vector.h>
|
||||
@@ -16,7 +17,7 @@ class endpoint :
|
||||
{
|
||||
public:
|
||||
/// Capabilities on a newly constructed endpoint handle
|
||||
constexpr static j6_cap_t creation_caps = 0;
|
||||
constexpr static j6_cap_t creation_caps = j6_cap_endpoint_all;
|
||||
|
||||
endpoint();
|
||||
virtual ~endpoint();
|
||||
|
||||
Reference in New Issue
Block a user