Subject: Re: Integrating securelevel and kauth(9)
To: None <tech-security@netbsd.org>
From: Martin S. Weber <Ephaeton@gmx.net>
List: tech-security
Date: 03/24/2006 21:14:21
On Fri, Mar 24, 2006 at 07:08:02PM +0000, David Laight wrote:
(...)
> For compatibility with old LKM (and driver code) I'd suggest that
> we'd have the constants MASK_0, MASK_1 and MASK_2 (MASK_-1 is zero).
> Whenever the new mask is changed we could do:
> 	if (mask & MASK_2)
> 		securelevel = 2;
> (...)

One thing I wonder considering the bit arithmetic...

There are only going to be 32 (64?) capabilities ever ?

(C Std: *6.5.10* Bitwise inclusive AND operator: 
 (2) Each of the operands shall have integer type.)

-Martin