Subject: CVS commit: src
To: None <source-changes@NetBSD.org>
From: Elad Efrat <elad@netbsd.org>
List: source-changes
Date: 01/31/2007 10:08:23
Module Name:	src
Committed By:	elad
Date:		Wed Jan 31 10:08:23 UTC 2007

Modified Files:
	src/share/man/man9: kauth.9
	src/sys/kern: kern_auth.c
	src/sys/sys: kauth.h

Log Message:
Add a new scope, the credentials scope, which is internal to the kauth(9)
implementation and meant to be used by security models to hook credential
related operations (init, fork, copy, free -- hooked in kauth_cred_alloc(),
kauth_proc_fork(), kauth_cred_clone(), and kauth_cred_free(), respectively)
and document it.

Add specificdata to credentials, and routines to register/deregister new
"keys", as well as set/get routines. This allows security models to add
their own private data to a kauth_cred_t.

The above two, combined, allow security models to control inheritance of
their own private data in credentials which is a requirement for doing
stuff like, I dunno, capabilities?


To generate a diff of this commit:
cvs rdiff -r1.50 -r1.51 src/share/man/man9/kauth.9
cvs rdiff -r1.40 -r1.41 src/sys/kern/kern_auth.c
cvs rdiff -r1.35 -r1.36 src/sys/sys/kauth.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.