kernel/generic/include/security/cap.h

   1 /*
   2  * Copyright (c) 2006 Jakub Jermar
   3  * All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions
   7  * are met:
   8  *
   9  * - Redistributions of source code must retain the above copyright
  10  *   notice, this list of conditions and the following disclaimer.
  11  * - Redistributions in binary form must reproduce the above copyright
  12  *   notice, this list of conditions and the following disclaimer in the
  13  *   documentation and/or other materials provided with the distribution.
  14  * - The name of the author may not be used to endorse or promote products
  15  *   derived from this software without specific prior written permission.
  16  *
  17  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
  18  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
  19  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
  20  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
  21  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  22  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  23  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  24  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  25  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
  26  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  27  */
  28
  29 /** @addtogroup generic
  30  * @{
  31  */
  32 /** @file
  33  */
  34
  35 /**
  36  * @file
  37  * @brief Capabilities definitions.
  38  *
  39  * Capabilities represent virtual rights that entitle their
  40  * holder to perform certain security sensitive tasks.
  41  *
  42  * Each task can have arbitrary combination of the capabilities
  43  * defined in this file. Therefore, they are required to be powers
  44  * of two.
  45  */
  46
  47 #ifndef __CAP_H__
  48 #define __CAP_H__
  49
  50 #include <typedefs.h>
  51
  52 /**
  53  * CAP_CAP allows its holder to grant/revoke arbitrary
  54  * privilege to/from other tasks.
  55  */
  56 #define CAP_CAP  (1 << 0)
  57
  58 /**
  59  * CAP_MEM_MANAGER allows its holder to map physical memory
  60  * to other tasks.
  61  */
  62 #define CAP_MEM_MANAGER  (1 << 1)
  63
  64 /**
  65  * CAP_IO_MANAGER allows its holder to access I/O space
  66  * to other tasks.
  67  */
  68 #define CAP_IO_MANAGER  (1 << 2)
  69
  70 /**
  71  * CAP_IRQ_REG entitles its holder to register IRQ handlers.
  72  */
  73 #define CAP_IRQ_REG  (1 << 3)
  74
  75 typedef uint32_t cap_t;
  76
  77 #ifdef __32_BITS__
  78
  79 extern sysarg_t sys_cap_grant(sysarg64_t *, cap_t);
  80 extern sysarg_t sys_cap_revoke(sysarg64_t *, cap_t);
  81
  82 #endif  /* __32_BITS__ */
  83
  84 #ifdef __64_BITS__
  85
  86 extern sysarg_t sys_cap_grant(sysarg_t, cap_t);
  87 extern sysarg_t sys_cap_revoke(sysarg_t, cap_t);
  88
  89 #endif  /* __64_BITS__ */
  90
  91 #endif
  92
  93 /** @}
  94  */