Struct Cap

pub struct Cap {
    pub target: ObjID,
    pub accessor: ObjID,
    pub protections: Protections,
    pub revocation: Revoc,
    /* private fields */
}

A capability that represents authorization for a Security Context to access an object.

Capabilities are stored inside crate::sec_ctx::SecCtx, and are authenticated using cryptographic signatures. When accessing an object for the first time, the kernel searches through the attached Security Context for a usable capability. If none found it will look through inactive contexts for a valid capability and then procedes to verify its signature in order to grant access rights.

Fields

• target - The object ID this capability grants access to
• accessor - The security context ID in which this capability resides
• protections - The specific access rights this capability grants
• flags - Specifies the cryptographic primitives used to form the signature
• gates - Allows access into an object in a specified range
• revocation - Specifies when the capability is invalid
• signature - the signature of the capability

Examples

// Example of creating and using a capability
todo

Fields

target: ObjID

Object ID this capability grants access to

accessor: ObjID

Security context ID in which this capability resides

protections: Protections

Specific access rights this capability grants

revocation: Revoc

Specifies when this capability is invalid, i.e. expiration.

Implementations

impl Cap

pub fn new( target: ObjID, accessor: ObjID, prots: Protections, target_priv_key: &SigningKey, revocation: Revoc, gates: Gates, hashing_algo: HashingAlgo, ) -> Result<Self, SecurityError>

creating a new capability, revoc specified in expiration data in ns from unix epoch

pub fn verify_sig( &self, verifying_key: &VerifyingKey, ) -> Result<(), SecurityError>

verifies signature inside capability

pub fn check_gate( &self, ptr_offset: u64, align: u64, ) -> Result<(), SecurityError>

checks to see if the specified ptr_offset falls in the capability’s gate.

Trait Implementations

impl Clone for Cap

fn clone(&self) -> Cap

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Cap

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Cap

fn eq(&self, other: &Cap) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for Cap

impl Eq for Cap

impl StructuralPartialEq for Cap