Page MenuHomeFreeBSD

mac: kdb/ddb framework hooks
ClosedPublic

Authored by mhorne on May 31 2022, 6:07 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Jun 12, 12:48 AM
Unknown Object (File)
May 20 2024, 9:00 PM
Unknown Object (File)
May 20 2024, 9:00 PM
Unknown Object (File)
May 20 2024, 8:59 PM
Unknown Object (File)
May 16 2024, 4:36 PM
Unknown Object (File)
May 15 2024, 7:57 AM
Unknown Object (File)
May 1 2024, 6:26 AM
Unknown Object (File)
Apr 30 2024, 6:22 PM

Details

Summary

Add three simple hooks to the debugger allowing for a loaded MAC policy
to intervene if desired:

  1. Before invoking the kdb backend
  2. Before ddb command registration
  3. Before ddb command execution

We extend struct db_command with a private pointer and two flag bits
reserved for policy use.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj added inline comments.
sys/ddb/db_command.c
494

This line appears to be too long.

sys/security/mac/mac_debugger.c
1 ↗(On Diff #106515)

mac_kdb.c might be a better name for this file. "debugger" sounds too generic to me.

This revision is now accepted and ready to land.Jul 13 2022, 2:30 PM
This revision was automatically updated to reflect the committed changes.