Andreas Kling 823186031d Kernel: Add a way to specify which memory regions can make syscalls ...

This patch adds sys$msyscall() which is loosely based on an OpenBSD
mechanism for preventing syscalls from non-blessed memory regions.

It works similarly to pledge and unveil, you can call it as many
times as you like, and when you're finished, you call it with a null
pointer and it will stop accepting new regions from then on.

If a syscall later happens and doesn't originate from one of the
previously blessed regions, the kernel will simply crash the process.

2021-02-02 20:13:44 +01:00

58 KiB

Raw Blame History

View Raw