Module capability 

Capability-based Security System

See also: Architecture Overview for the security model and data flow diagrams.

Implements a capability-based security model for Strat9-OS. All kernel resources are accessed through unforgeable tokens (capabilities).

Structs

CapId

Unique identifier for a capability

CapPermissions

Permissions associated with a capability

Capability

A capability token that grants access to a kernel resource

CapabilityManager

Global capability manager

CapabilityTable

Table of capabilities for a process

ResourceKey 🔒

Key for per-resource refcounting: (resource_type, resource_ptr)

Enums

ResourceType

Types of kernel resources that can be accessed via capabilities

Statics

CAPABILITY_MANAGER 🔒

Functions

get_capability_manager

Get a reference to the global capability manager

release_capability

Releases a capability and cleans up the underlying resource.