2011-12-22 15:19:25 +00:00
|
|
|
/*
|
|
|
|
* \brief Policy applied to all children of the init process
|
|
|
|
* \author Norman Feske
|
|
|
|
* \date 2010-04-29
|
|
|
|
*/
|
|
|
|
|
|
|
|
/*
|
2016-05-12 12:58:51 +00:00
|
|
|
* Copyright (C) 2010-2016 Genode Labs GmbH
|
2011-12-22 15:19:25 +00:00
|
|
|
*
|
|
|
|
* This file is part of the Genode OS framework, which is distributed
|
|
|
|
* under the terms of the GNU General Public License version 2.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#ifndef _INCLUDE__INIT__CHILD_POLICY_H_
|
|
|
|
#define _INCLUDE__INIT__CHILD_POLICY_H_
|
|
|
|
|
|
|
|
/* Genode includes */
|
|
|
|
#include <base/service.h>
|
|
|
|
#include <base/child.h>
|
2016-01-12 13:11:58 +00:00
|
|
|
#include <base/session_label.h>
|
2016-11-06 13:26:34 +00:00
|
|
|
#include <base/attached_ram_dataspace.h>
|
2011-12-22 15:19:25 +00:00
|
|
|
#include <util/arg_string.h>
|
|
|
|
#include <rom_session/connection.h>
|
2016-05-12 12:58:51 +00:00
|
|
|
#include <base/session_label.h>
|
2016-11-06 13:26:34 +00:00
|
|
|
#include <os/dynamic_rom_session.h>
|
2011-12-22 15:19:25 +00:00
|
|
|
|
|
|
|
namespace Init {
|
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
class Child_policy_ram_phys;
|
|
|
|
class Child_policy_handle_cpu_priorities;
|
|
|
|
class Child_policy_provide_rom_file;
|
2016-11-06 13:26:34 +00:00
|
|
|
class Child_policy_provide_dynamic_rom;
|
2015-03-04 20:12:14 +00:00
|
|
|
class Child_policy_redirect_rom_file;
|
|
|
|
class Traditional_child_policy;
|
2016-11-06 13:26:34 +00:00
|
|
|
|
2017-01-03 17:12:53 +00:00
|
|
|
using namespace Genode;
|
2016-11-06 13:26:34 +00:00
|
|
|
using Genode::size_t;
|
2017-01-03 17:12:53 +00:00
|
|
|
using Genode::strcmp;
|
|
|
|
using Genode::snprintf;
|
2015-03-04 20:12:14 +00:00
|
|
|
}
|
2015-02-07 20:02:50 +00:00
|
|
|
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
class Init::Child_policy_ram_phys
|
|
|
|
{
|
|
|
|
private:
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
bool _constrain_phys;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
public:
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
Child_policy_ram_phys(bool constrain_phys)
|
|
|
|
: _constrain_phys(constrain_phys) { }
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
/**
|
|
|
|
* Filter arguments of session request
|
|
|
|
*
|
2015-03-20 16:50:41 +00:00
|
|
|
* This method removes phys_start and phys_size ram_session
|
2015-03-04 20:12:14 +00:00
|
|
|
* parameters if the child configuration does not explicitly
|
|
|
|
* permits this.
|
|
|
|
*/
|
|
|
|
void filter_session_args(const char *service, char *args,
|
2017-01-03 17:12:53 +00:00
|
|
|
size_t args_len)
|
2015-03-04 20:12:14 +00:00
|
|
|
{
|
|
|
|
/* intercept only RAM session requests */
|
2017-01-03 17:12:53 +00:00
|
|
|
if (strcmp(service, "RAM"))
|
2015-03-04 20:12:14 +00:00
|
|
|
return;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
if (_constrain_phys)
|
|
|
|
return;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
Arg_string::remove_arg(args, "phys_start");
|
|
|
|
Arg_string::remove_arg(args, "phys_size");
|
|
|
|
}
|
|
|
|
};
|
2012-10-24 14:27:26 +00:00
|
|
|
|
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
class Init::Child_policy_handle_cpu_priorities
|
|
|
|
{
|
|
|
|
/* priority parameters */
|
|
|
|
long _prio_levels_log2;
|
|
|
|
long _priority;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
public:
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
Child_policy_handle_cpu_priorities(long prio_levels_log2, long priority)
|
|
|
|
: _prio_levels_log2(prio_levels_log2), _priority(priority) { }
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2017-01-03 17:12:53 +00:00
|
|
|
void filter_session_args(const char *service, char *args, size_t args_len)
|
2015-03-04 20:12:14 +00:00
|
|
|
{
|
|
|
|
/* intercept only CPU session requests to scale priorities */
|
2017-01-03 17:12:53 +00:00
|
|
|
if (strcmp(service, "CPU") || _prio_levels_log2 == 0)
|
2015-03-04 20:12:14 +00:00
|
|
|
return;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-27 13:02:04 +00:00
|
|
|
unsigned long priority = Arg_string::find_arg(args, "priority").ulong_value(0);
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
/* clamp priority value to valid range */
|
|
|
|
priority = min((unsigned)Cpu_session::PRIORITY_LIMIT - 1, priority);
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
long discarded_prio_lsb_bits_mask = (1 << _prio_levels_log2) - 1;
|
|
|
|
if (priority & discarded_prio_lsb_bits_mask) {
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 17:07:09 +00:00
|
|
|
warning("priority band too small, losing least-significant priority bits");
|
2011-12-22 15:19:25 +00:00
|
|
|
}
|
2015-03-04 20:12:14 +00:00
|
|
|
priority >>= _prio_levels_log2;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
/* assign child priority to the most significant priority bits */
|
|
|
|
priority |= _priority*(Cpu_session::PRIORITY_LIMIT >> _prio_levels_log2);
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
/* override priority when delegating the session request to the parent */
|
|
|
|
char value_buf[64];
|
2017-01-03 17:12:53 +00:00
|
|
|
snprintf(value_buf, sizeof(value_buf), "0x%lx", priority);
|
2015-03-04 20:12:14 +00:00
|
|
|
Arg_string::set_arg(args, args_len, "priority", value_buf);
|
|
|
|
}
|
|
|
|
};
|
2011-12-22 15:19:25 +00:00
|
|
|
|
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
class Init::Child_policy_provide_rom_file
|
|
|
|
{
|
|
|
|
private:
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2017-01-03 17:12:53 +00:00
|
|
|
struct Local_rom_session_component : Rpc_object<Rom_session>
|
2015-03-04 20:12:14 +00:00
|
|
|
{
|
2017-01-03 17:12:53 +00:00
|
|
|
Rpc_entrypoint &ep;
|
|
|
|
Dataspace_capability ds_cap;
|
Support for dynamic ROM sessions, fix #170
This patch introduces support for ROM sessions that update their
provided data during the lifetime of the session. The 'Rom_session'
interface had been extended with the new 'release()' and 'sigh()'
functions, which are needed to support the new protocol. All ROM
services have been updated to the new interface.
Furthermore, the patch changes the child policy of init
with regard to the handling of configuration files. The 'Init::Child'
used to always provide the ROM dataspace with the child's config file
via a locally implemented ROM service. However, for dynamic ROM
sessions, we need to establish a session to the real supplier of the ROM
data. This is achieved by using a new 'Child_policy_redirect_rom_file'
policy to handle the 'configfile' rather than handling the 'configfile'
case entirely within 'Child_config'.
To see the new facility in action, the new 'os/run/dynamic_config.run'
script provides a simple scenario. The config file of the test program
is provided by a service, which generates and updates the config data
at regular intervals.
In addition, new support has been added to let slaves use dynamic
reconfiguration. By using the new 'Child_policy_dynamic_rom_file', the
configuration of a slave can be changed dynamically at runtime via the
new 'configure()' function.
The config is provided as plain null-terminated string (instead of a
dataspace capability) because we need to buffer the config data anyway.
So there is no benefit of using a dataspace. For buffering configuration
data, a 'Ram_session' must be supplied. If no 'Ram_session' is specified
at construction time of a 'Slave_policy', no config is supplied to the
slave (which is still a common case).
An example for dynamically reconfiguring a slave is provided by
'os/run/dynamic_config_slave.run'.
2012-04-04 15:07:19 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
/**
|
|
|
|
* Constructor
|
|
|
|
*/
|
2017-01-03 17:12:53 +00:00
|
|
|
Local_rom_session_component(Rpc_entrypoint &ep,
|
|
|
|
Dataspace_capability ds)
|
2016-11-06 13:26:34 +00:00
|
|
|
: ep(ep), ds_cap(ds) { ep.manage(this); }
|
|
|
|
|
|
|
|
~Local_rom_session_component() { ep.dissolve(this); }
|
2011-12-22 15:19:25 +00:00
|
|
|
|
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
/***************************
|
|
|
|
** ROM session interface **
|
|
|
|
***************************/
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2017-01-03 17:12:53 +00:00
|
|
|
Rom_dataspace_capability dataspace() override {
|
|
|
|
return static_cap_cast<Rom_dataspace>(ds_cap); }
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2017-01-03 17:12:53 +00:00
|
|
|
void sigh(Signal_context_capability) override { }
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2016-11-06 13:26:34 +00:00
|
|
|
} _session;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2017-01-03 17:12:53 +00:00
|
|
|
Session_label const _module_name;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2017-01-03 17:12:53 +00:00
|
|
|
typedef Local_service<Local_rom_session_component> Service;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2016-11-06 13:26:34 +00:00
|
|
|
Service::Single_session_factory _session_factory { _session };
|
|
|
|
Service _service { _session_factory };
|
Support for dynamic ROM sessions, fix #170
This patch introduces support for ROM sessions that update their
provided data during the lifetime of the session. The 'Rom_session'
interface had been extended with the new 'release()' and 'sigh()'
functions, which are needed to support the new protocol. All ROM
services have been updated to the new interface.
Furthermore, the patch changes the child policy of init
with regard to the handling of configuration files. The 'Init::Child'
used to always provide the ROM dataspace with the child's config file
via a locally implemented ROM service. However, for dynamic ROM
sessions, we need to establish a session to the real supplier of the ROM
data. This is achieved by using a new 'Child_policy_redirect_rom_file'
policy to handle the 'configfile' rather than handling the 'configfile'
case entirely within 'Child_config'.
To see the new facility in action, the new 'os/run/dynamic_config.run'
script provides a simple scenario. The config file of the test program
is provided by a service, which generates and updates the config data
at regular intervals.
In addition, new support has been added to let slaves use dynamic
reconfiguration. By using the new 'Child_policy_dynamic_rom_file', the
configuration of a slave can be changed dynamically at runtime via the
new 'configure()' function.
The config is provided as plain null-terminated string (instead of a
dataspace capability) because we need to buffer the config data anyway.
So there is no benefit of using a dataspace. For buffering configuration
data, a 'Ram_session' must be supplied. If no 'Ram_session' is specified
at construction time of a 'Slave_policy', no config is supplied to the
slave (which is still a common case).
An example for dynamically reconfiguring a slave is provided by
'os/run/dynamic_config_slave.run'.
2012-04-04 15:07:19 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
public:
|
Support for dynamic ROM sessions, fix #170
This patch introduces support for ROM sessions that update their
provided data during the lifetime of the session. The 'Rom_session'
interface had been extended with the new 'release()' and 'sigh()'
functions, which are needed to support the new protocol. All ROM
services have been updated to the new interface.
Furthermore, the patch changes the child policy of init
with regard to the handling of configuration files. The 'Init::Child'
used to always provide the ROM dataspace with the child's config file
via a locally implemented ROM service. However, for dynamic ROM
sessions, we need to establish a session to the real supplier of the ROM
data. This is achieved by using a new 'Child_policy_redirect_rom_file'
policy to handle the 'configfile' rather than handling the 'configfile'
case entirely within 'Child_config'.
To see the new facility in action, the new 'os/run/dynamic_config.run'
script provides a simple scenario. The config file of the test program
is provided by a service, which generates and updates the config data
at regular intervals.
In addition, new support has been added to let slaves use dynamic
reconfiguration. By using the new 'Child_policy_dynamic_rom_file', the
configuration of a slave can be changed dynamically at runtime via the
new 'configure()' function.
The config is provided as plain null-terminated string (instead of a
dataspace capability) because we need to buffer the config data anyway.
So there is no benefit of using a dataspace. For buffering configuration
data, a 'Ram_session' must be supplied. If no 'Ram_session' is specified
at construction time of a 'Slave_policy', no config is supplied to the
slave (which is still a common case).
An example for dynamically reconfiguring a slave is provided by
'os/run/dynamic_config_slave.run'.
2012-04-04 15:07:19 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
/**
|
|
|
|
* Constructor
|
|
|
|
*/
|
2017-01-03 17:12:53 +00:00
|
|
|
Child_policy_provide_rom_file(Session_label const &module_name,
|
|
|
|
Dataspace_capability ds_cap,
|
|
|
|
Rpc_entrypoint *ep)
|
2015-03-04 20:12:14 +00:00
|
|
|
:
|
2016-11-06 13:26:34 +00:00
|
|
|
_session(*ep, ds_cap), _module_name(module_name)
|
2016-05-12 12:58:51 +00:00
|
|
|
{ }
|
Support for dynamic ROM sessions, fix #170
This patch introduces support for ROM sessions that update their
provided data during the lifetime of the session. The 'Rom_session'
interface had been extended with the new 'release()' and 'sigh()'
functions, which are needed to support the new protocol. All ROM
services have been updated to the new interface.
Furthermore, the patch changes the child policy of init
with regard to the handling of configuration files. The 'Init::Child'
used to always provide the ROM dataspace with the child's config file
via a locally implemented ROM service. However, for dynamic ROM
sessions, we need to establish a session to the real supplier of the ROM
data. This is achieved by using a new 'Child_policy_redirect_rom_file'
policy to handle the 'configfile' rather than handling the 'configfile'
case entirely within 'Child_config'.
To see the new facility in action, the new 'os/run/dynamic_config.run'
script provides a simple scenario. The config file of the test program
is provided by a service, which generates and updates the config data
at regular intervals.
In addition, new support has been added to let slaves use dynamic
reconfiguration. By using the new 'Child_policy_dynamic_rom_file', the
configuration of a slave can be changed dynamically at runtime via the
new 'configure()' function.
The config is provided as plain null-terminated string (instead of a
dataspace capability) because we need to buffer the config data anyway.
So there is no benefit of using a dataspace. For buffering configuration
data, a 'Ram_session' must be supplied. If no 'Ram_session' is specified
at construction time of a 'Slave_policy', no config is supplied to the
slave (which is still a common case).
An example for dynamically reconfiguring a slave is provided by
'os/run/dynamic_config_slave.run'.
2012-04-04 15:07:19 +00:00
|
|
|
|
2017-01-03 17:12:53 +00:00
|
|
|
Service *resolve_session_request(const char *service_name,
|
2015-03-04 20:12:14 +00:00
|
|
|
const char *args)
|
|
|
|
{
|
|
|
|
/* ignore session requests for non-ROM services */
|
2017-01-03 17:12:53 +00:00
|
|
|
if (strcmp(service_name, "ROM")) return 0;
|
2014-09-12 18:17:47 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
/* drop out if request refers to another file name */
|
2016-05-12 12:58:51 +00:00
|
|
|
{
|
2017-01-03 17:12:53 +00:00
|
|
|
Session_label const label = label_from_args(args);
|
2016-05-12 12:58:51 +00:00
|
|
|
return label.last_element() == _module_name
|
2016-11-06 13:26:34 +00:00
|
|
|
? &_service : nullptr;
|
2016-05-12 12:58:51 +00:00
|
|
|
}
|
2015-03-04 20:12:14 +00:00
|
|
|
}
|
|
|
|
};
|
Support for dynamic ROM sessions, fix #170
This patch introduces support for ROM sessions that update their
provided data during the lifetime of the session. The 'Rom_session'
interface had been extended with the new 'release()' and 'sigh()'
functions, which are needed to support the new protocol. All ROM
services have been updated to the new interface.
Furthermore, the patch changes the child policy of init
with regard to the handling of configuration files. The 'Init::Child'
used to always provide the ROM dataspace with the child's config file
via a locally implemented ROM service. However, for dynamic ROM
sessions, we need to establish a session to the real supplier of the ROM
data. This is achieved by using a new 'Child_policy_redirect_rom_file'
policy to handle the 'configfile' rather than handling the 'configfile'
case entirely within 'Child_config'.
To see the new facility in action, the new 'os/run/dynamic_config.run'
script provides a simple scenario. The config file of the test program
is provided by a service, which generates and updates the config data
at regular intervals.
In addition, new support has been added to let slaves use dynamic
reconfiguration. By using the new 'Child_policy_dynamic_rom_file', the
configuration of a slave can be changed dynamically at runtime via the
new 'configure()' function.
The config is provided as plain null-terminated string (instead of a
dataspace capability) because we need to buffer the config data anyway.
So there is no benefit of using a dataspace. For buffering configuration
data, a 'Ram_session' must be supplied. If no 'Ram_session' is specified
at construction time of a 'Slave_policy', no config is supplied to the
slave (which is still a common case).
An example for dynamically reconfiguring a slave is provided by
'os/run/dynamic_config_slave.run'.
2012-04-04 15:07:19 +00:00
|
|
|
|
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
class Init::Child_policy_redirect_rom_file
|
|
|
|
{
|
|
|
|
private:
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
char const *_from;
|
|
|
|
char const *_to;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
public:
|
2012-10-24 14:27:26 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
Child_policy_redirect_rom_file(const char *from, const char *to)
|
|
|
|
: _from(from), _to(to) { }
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
void filter_session_args(const char *service,
|
2017-01-03 17:12:53 +00:00
|
|
|
char *args, size_t args_len)
|
2015-03-04 20:12:14 +00:00
|
|
|
{
|
|
|
|
if (!_from || !_to) return;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2015-03-04 20:12:14 +00:00
|
|
|
/* ignore session requests for non-ROM services */
|
2017-01-03 17:12:53 +00:00
|
|
|
if (strcmp(service, "ROM")) return;
|
2011-12-22 15:19:25 +00:00
|
|
|
|
2016-05-12 12:58:51 +00:00
|
|
|
/* drop out if request refers to another module name */
|
|
|
|
Session_label const label = label_from_args(args);
|
|
|
|
Session_label const from(_from);
|
|
|
|
if (from != label.last_element()) return;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* The module name corresponds to the last part of the label.
|
|
|
|
* We have to replace this part with the 'to' module name.
|
|
|
|
* If the label consists of only the module name but no prefix,
|
|
|
|
* we replace the entire label with the 'to' module name.
|
|
|
|
*/
|
|
|
|
Session_label const prefix = label.prefix();
|
|
|
|
Session_label const to(_to);
|
|
|
|
|
|
|
|
Session_label const prefixed_to =
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 17:07:09 +00:00
|
|
|
prefixed_label(prefix.valid() ? prefix : Session_label(), to);
|
2015-03-04 20:12:14 +00:00
|
|
|
|
2016-05-12 12:58:51 +00:00
|
|
|
Arg_string::set_arg_string(args, args_len, "label", prefixed_to.string());
|
2015-03-04 20:12:14 +00:00
|
|
|
}
|
|
|
|
};
|
2011-12-22 15:19:25 +00:00
|
|
|
|
|
|
|
#endif /* _INCLUDE__INIT__CHILD_POLICY_H_ */
|