Page MenuHomeFreeBSD

mac: kdb/ddb framework hooks
ClosedPublic

Authored by mhorne on May 31 2022, 6:07 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Nov 26, 11:21 AM
Unknown Object (File)
Nov 4 2025, 12:17 AM
Unknown Object (File)
Oct 29 2025, 9:35 AM
Unknown Object (File)
Oct 29 2025, 9:34 AM
Unknown Object (File)
Oct 29 2025, 9:16 AM
Unknown Object (File)
Oct 23 2025, 2:35 AM
Unknown Object (File)
Oct 16 2025, 9:21 AM
Unknown Object (File)
Oct 16 2025, 9:21 AM

Details

Summary

Add three simple hooks to the debugger allowing for a loaded MAC policy
to intervene if desired:

  1. Before invoking the kdb backend
  2. Before ddb command registration
  3. Before ddb command execution

We extend struct db_command with a private pointer and two flag bits
reserved for policy use.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 45795
Build 42683: arc lint + arc unit

Event Timeline

markj added inline comments.
sys/ddb/db_command.c
481

This line appears to be too long.

sys/security/mac/mac_debugger.c
1

mac_kdb.c might be a better name for this file. "debugger" sounds too generic to me.

This revision is now accepted and ready to land.Jul 13 2022, 2:30 PM
This revision was automatically updated to reflect the committed changes.