f6a78ee143
XACE: Remove the extension code entirely, XACE is completely static now.
2008-01-25 18:04:10 -05:00
7724c30a75
XACE: Stop using fake requestVectors in favor of a simple hook call.
2008-01-25 17:28:17 -05:00
f82329b081
XACE: Don't need to actually register a protocol extension.
2008-01-25 16:20:46 -05:00
39cb782f28
XACE: DeleteCallbackList zeroes out its argument so don't do it twice.
2008-01-03 23:17:06 -05:00
cd0603c2dc
Bug #13765 : Heap corruption in XC-SECURITY extension code.
2008-01-03 21:41:02 -05:00
1603130236
Merge branch 'master' into XACE-SELINUX
...
Conflicts:
Xext/xace.c
Xext/xace.h
2007-11-14 13:35:50 -05:00
d7c5e8bfc1
Modified performance patches from Arjan van de Ven <arjan@infradead.org>
...
Subject: [PATCH] fix some performance gaps in Xace
The XaceHook function is used in several hotpaths.
The problem with it (performance wise) is twofold:
* The XaceHook function has a big switch() statement for the hook number in it
* The XaceHook function uses varargs to reassemble the final dispatch arguments again
Both are expensive operations... for something that is known at compile time
This patch turns the hotpath XaceHook call into a direct call to avoid
the switch and varargs; this gives me over 10% performance gain
on the x11perf benchmark.
2007-11-06 16:26:09 -05:00
a52c9b2a59
Merge branch 'master' into XACE-SELINUX
...
Conflicts:
dix/dispatch.c
dix/property.c
hw/xfree86/common/xf86VidMode.c
include/xkbsrv.h
render/glyph.c
xkb/xkbActions.c
2007-11-05 19:08:36 -05:00
934281126f
Xext: Remove usage of alloca
...
Replace with heap allocations.
2007-11-05 14:34:46 +00:00
825f09dffd
xace: Still more changes to selection code. Removed the SelectionPtr from
...
the hook - the hook only needs the Atom to control access to the selection
object. Upgraded the SelectionCallback to take a client argument and
additional type codes so that it can be used for redirection.
2007-10-23 17:12:57 -04:00
db66e66dbf
xace: Add an access_mode field to the extension structure.
...
This allows the same callback to be used for both extension hooks.
2007-10-17 13:51:11 -04:00
50551ec693
xace: remove obsoleted DRAWABLE_ACCESS hook.
2007-09-28 15:04:33 -04:00
0003ccfcdf
xace: add new fields to resource access hook to allow parent resource objects
...
to be passed in at create time. Also added a missing devPrivates initializer.
2007-09-05 11:18:36 -04:00
cda92bbf12
xace: add hooks + new access codes: XFixes extension.
...
Required a new name argument to the selection access hook to handle
XFixesSelectSelectionInput.
2007-08-30 11:48:45 -04:00
e39694789e
xace: drop map-window checking hook, add new hooks for controlling the
...
delivery of events to windows and clients.
This is tentative. It's likely that an additional last-resort hook will
be necessary for code that calls TryClientEvents or WriteEventsToClient
directly. It's also possible that new xace machinery will be necessary
to classify events and pull useful resource ID's out of them.
The failure case also needs some thinking through. Should event delivery
"succeed" or should it report undeliverable?
Finally, XKB appears to call WriteToClient to pass events. Sigh.
2007-08-29 14:16:46 -04:00
41355a53c2
xace: add hooks + new access codes: core protocol input requests
2007-08-28 15:10:20 -04:00
5bee8db003
xace: drop background-none checking hook, add new hook for controlling
...
access to other clients.
2007-08-16 10:44:51 -04:00
3c9553ac2c
xace: rename hostlist security hook to "server" as this hook will be used
...
for other types of server access besides just the host list.
2007-08-15 14:14:25 -04:00
102df4f9ba
xace: drop site-policy and declare-extension-security hooks, add 2 new hooks
...
for controlling access to screens and screen savers.
2007-08-06 09:16:30 -04:00
9cee4ec5e6
xace: change the semantics of the return value of XACE hooks to allow
...
arbitrary X status codes instead of just TRUE/FALSE.
The dix layer in most cases still does not propagate the return value of
XACE hooks back to the client, however. There is more error propagation
work to do.
2007-04-17 16:01:56 -04:00
0331c6a8fc
Merge branch 'master' into XACE-SELINUX
2007-03-26 10:28:05 -04:00
04b87d6dfa
Static and dead code cleaup for Xext/
2007-03-25 17:57:22 -04:00
e1cc68add0
xace: drop the name argument from the property callback.
2007-03-22 17:33:16 -04:00
1b58304ac8
xace: add new argument to property hook for property structure itself.
2007-03-22 14:07:01 -04:00
a3296d111d
xace: add access_mode argument to selection hook.
2007-03-21 17:01:26 -04:00
9c144f8ac5
xace: add XACE_SELECTION_ACCESS hook for selection redirection/access.
2007-03-21 14:39:00 -04:00
2945deba1d
xace: drop XACE_WINDOW_INIT hook, it has been superseded by ResourceStateCallback.
2007-03-19 17:09:10 -04:00
ac90ce58ba
Naming change: Security*Operation -> Xace*Operation
2006-12-01 21:15:41 -05:00
8ba0c7b62c
xace: avoid 'unused variable pScreen'
...
Initialise pScreen explicitly, as REGION_* macros ignore pScreen.
2006-11-08 15:29:16 +02:00
0fba09cdfc
Include dix-config.h.
2006-09-08 15:23:06 -04:00
13c6713c82
Add four new XACE hooks: auditing, key event notification, window init
2006-08-25 18:17:01 -04:00
45c229f526
Remove LBX code.
2006-08-03 14:26:06 -04:00
96e45626c4
Rebase Security extension to use devPrivates for storing security state.
2006-08-02 20:29:59 -04:00
227a319340
Add XACE extension source files.
...
(Copied from XACE-SELINUX branch in Xorg monolith CVS since these were never
imported to modular cvs or git trees.)
2006-06-20 15:29:42 -07:00
Eamon Walsh
Daniel Stone
Adam Jackson
Eamon Walsh