kdbus: add policy database implementation
authorDaniel Mack <daniel@zonque.org>
Thu, 11 Sep 2014 17:00:43 +0000 (19:00 +0200)
committerMaciej Wereski <m.wereski@partner.samsung.com>
Tue, 9 Jun 2015 09:31:21 +0000 (11:31 +0200)
commit36f2d0fc4a7fdc1ed0f08a70956e91c21ecd3357
tree9009822e0f7e4662225a0bf452a3503d4364883a
parent98f5eff0cd684abb50a79320349d113d326063de
kdbus: add policy database implementation

This patch adds the policy database implementation.

A policy database restricts the possibilities of connections to own,
see and talk to well-known names. It can be associated with a bus
(through a policy holder connection) or a custom endpoint.

By default, buses have an empty policy database that is augmented on
demand when a policy holder connection is instantiated.

Policies are set through KDBUS_CMD_HELLO (when creating a policy
holder connection), KDBUS_CMD_CONN_UPDATE (when updating a policy
holder connection), KDBUS_CMD_EP_MAKE (creating a custom endpoint)
or KDBUS_CMD_EP_UPDATE (updating a custom endpoint). In all cases,
the name and policy access information is stored in items of type
KDBUS_ITEM_NAME and KDBUS_ITEM_POLICY_ACCESS.

See kdbus.policy(7) for more details.

Signed-off-by: Daniel Mack <daniel@zonque.org>
Signed-off-by: David Herrmann <dh.herrmann@gmail.com>
Signed-off-by: Djalal Harouni <tixxdz@opendz.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
ipc/kdbus/policy.c [new file with mode: 0644]
ipc/kdbus/policy.h [new file with mode: 0644]