Page MenuHomeFreeBSD

mac: kdb/ddb framework hooks
ClosedPublic

Authored by mhorne on May 31 2022, 6:07 PM.

Details

Summary

Add three simple hooks to the debugger allowing for a loaded MAC policy
to intervene if desired:

  1. Before invoking the kdb backend
  2. Before ddb command registration
  3. Before ddb command execution

We extend struct db_command with a private pointer and two flag bits
reserved for policy use.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.

Event Timeline

markj added inline comments.
sys/ddb/db_command.c
493

This line appears to be too long.

sys/security/mac/mac_debugger.c
1 ↗(On Diff #106515)

mac_kdb.c might be a better name for this file. "debugger" sounds too generic to me.

This revision is now accepted and ready to land.Wed, Jul 13, 2:30 PM
This revision was automatically updated to reflect the committed changes.