Age | Commit message (Collapse) | Author | |
---|---|---|---|
8 days | kern: os: Document the mac_border structure | Ian Moffett | |
Signed-off-by: Ian Moffett <ian@osmora.org> | |||
13 days | libc: Add resource border crossing interface | Ian Moffett | |
Introduce a new libc cross() function which acts as a wrapper to the SYS_cross system call. Signed-off-by: Ian Moffett <ian@osmora.org> | |||
13 days | kern: mac: Make mac_map() return ssize_t | Ian Moffett | |
The map callback within the MAC ops returns ssize_t, therefore the mac_map() wrapper should return the same Signed-off-by: Ian Moffett <ian@osmora.org> | |||
2025-09-23 | kern: security: Add initial support for MAC | Ian Moffett | |
This commit introduces initial support for mandatory access control. As one may recall, L5 follows "everything is memory". In order to interact with a resource, a process must request it from the kernel in the form of a (sometimes) syncable memory buffer. Each resource as well as processes have an access level, if a process attempts to request a resource with a higher access level than it, the request is rejected by the kernel. However, if a process has a greater than or equal access level as a resource, the request can be granted. Signed-off-by: Ian Moffett <ian@osmora.org> |