genode/os/include
Norman Feske b45242c50f Add chroot support to core
Since the recent move of the process creation into core, the original chroot trampoline
mechanism implemented in 'os/src/app/chroot' does not work anymore. A
process could simply escape the chroot environment by spawning a new
process via core's PD service. Therefore, this patch moves the chroot
support into core. So the chroot policy becomes mandatory part of the
process creation.  For each process created by core, core checks for
'root' argument of the PD session. If a path is present, core takes the
precautions needed to execute the new process in the specified chroot
environment.

This conceptual change implies minor changes with respect to the Genode
API and the configuration of the init process. The API changes are the
enhancement of the 'Genode::Child' and 'Genode::Process' constructors to
take the root path as argument. Init supports the specification of a
chroot per process by specifying the new 'root' attribute to the
'<start>' node of the process. In line with these changes, the
'Loader::Session::start' function has been enhanced with the additional
(optional) root argument.
2012-11-05 17:31:05 +01:00
..
audio_out_session Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
blit Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
block Allocate DMA buffer for block packet stream 2012-07-25 19:14:06 +02:00
block_session New DDE-Linux-based USB driver 2012-05-29 13:54:58 +02:00
dde_kit DDE kit: Timer add schedule function form timers 2012-05-23 19:17:23 +02:00
drivers/timer Move away drivers from generic base-repository 2012-10-29 10:08:29 +01:00
file_system_session FAT file system service 2012-07-10 16:30:26 +02:00
framebuffer_session Qualifying RPC functions as const 2012-01-27 16:54:05 +01:00
gpu Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
init Add chroot support to core 2012-11-05 17:31:05 +01:00
input Qt-based media player 2012-05-29 13:55:00 +02:00
input_session Qualifying RPC functions as const 2012-01-27 16:54:05 +01:00
ldso Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
loader_session Add chroot support to core 2012-11-05 17:31:05 +01:00
net Fix UDP checksum calculation (fixes #360) 2012-09-24 09:17:59 +02:00
nic Make nic_bridge's MAC address range configurable 2012-10-24 16:39:02 +02:00
nic_session Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
nitpicker_gfx Add const qualifiers 2012-10-30 12:25:19 +01:00
nitpicker_session Replace Framebuffer::info by Framebuffer::mode 2012-01-25 13:27:47 +01:00
nitpicker_view Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
os Move 'Static_root' to public place 2012-10-08 15:08:26 +02:00
packet_stream_rx Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
packet_stream_tx Simplify use of custom data-flow signal handlers 2012-04-17 11:08:52 +02:00
pci_device Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
pci_session Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
platform Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
terminal_session Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
timer_session Timer: make ram_quota and stack platform-dependent 2012-09-19 14:28:36 +02:00
util Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00
xev_track Bump year in copyright headers to 2012 2012-01-03 15:35:05 +01:00