summaryrefslogtreecommitdiff
path: root/Xext/xace.h
AgeCommit message (Collapse)AuthorFilesLines
2012-03-21Introduce a consistent coding styleKeith Packard1-19/+16
This is strictly the application of the script 'x-indent-all.sh' from util/modular. Compared to the patch that Daniel posted in January, I've added a few indent flags: -bap -psl -T PrivatePtr -T pmWait -T _XFUNCPROTOBEGIN -T _XFUNCPROTOEND -T _X_EXPORT The typedefs were needed to make the output of sdksyms.sh match the previous output, otherwise, the code is formatted badly enough that sdksyms.sh generates incorrect output. The generated code was compared with the previous version and found to be essentially identical -- "assert" line numbers and BUILD_TIME were the only differences found. The comparison was done with this script: dir1=$1 dir2=$2 for dir in $dir1 $dir2; do (cd $dir && find . -name '*.o' | while read file; do dir=`dirname $file` base=`basename $file .o` dump=$dir/$base.dump objdump -d $file > $dump done) done find $dir1 -name '*.dump' | while read dump; do otherdump=`echo $dump | sed "s;$dir1;$dir2;"` diff -u $dump $otherdump done Signed-off-by: Keith Packard <keithp@keithp.com> Acked-by: Daniel Stone <daniel@fooishbar.org> Acked-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2009-09-02Correct outdated e-mail address in "Author" statements.Eamon Walsh1-1/+1
Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
2009-01-05 Update sdk headers to export new symbols.Paulo Cesar Pereira de Andrade1-10/+10
All symbols in installed sdk headers should be explicitly tagged as exported symbols. Otherwise, to ensure it is not a mistake, one could write it as something like: extern /* NOEXPORT */ type name ...; but the proper procedure really should be to use a non sdk header (or a "noinst_" one). This patch also removes prototypes to some functions that existed only temporarily.
2008-12-18xace: Export wrappers around two Xtrans functions used by modules.Eamon Walsh1-0/+4
Don't know a better way to do this, since Xtrans isn't a library that can be linked into modules.
2008-12-18Add xace headers to the SDK when enabled and export the XaceHooks symbolEamon Walsh1-7/+7
to modules.
2008-12-03Rework symbol visibility for easier maintenancePaulo Cesar Pereira de Andrade1-1/+2
Save in a few special cases, _X_EXPORT should not be used in C source files. Instead, it should be used in headers, and the proper C source include that header. Some special cases are symbols that need to be shared between modules, but not expected to be used by external drivers, and symbols that are accessible via LoaderSymbol/dlopen. This patch also adds conditionally some new sdk header files, depending on extensions enabled. These files were added to match pattern for other extensions/modules, that is, have the headers "deciding" symbol visibility in the sdk. These headers are: o Xext/panoramiXsrv.h, Xext/panoramiX.h o fbpict.h (unconditionally) o vidmodeproc.h o mioverlay.h (unconditionally, used only by xaa) o xfixes.h (unconditionally, symbols required by dri2) LoaderSymbol and similar functions now don't have different prototypes, in loaderProcs.h and xf86Module.h, so that both headers can be included, without the need of defining IN_LOADER. xf86NewInputDevice() device prototype readded to xf86Xinput.h, but not exported (and with a comment about it).
2008-02-29XACE: Add generic support for property and selection polyinstantiation.Eamon Walsh1-3/+4
2008-02-20XACE: Make the default window background state configurable per-window.Eamon Walsh1-2/+2
To recap: the original XC-SECURITY extension disallowed background "None" if the window was untrusted. XACE 1.0 preserved this check as a hook function. XACE pre-2.0 removed the hook and first abolished background "None entirely, then restored it as a global on/off switch in response to Bug #13683. Now it's back to being per-window, via a flag instead of a hook function.
2008-02-12XACE: Move the selection access hook to its own function.Eamon Walsh1-0/+4
2008-02-05XACE: Push the dix "structure" includes down to the security modules.Eamon Walsh1-4/+4
2008-02-05XACE: Move the property access hook to its own function.Eamon Walsh1-0/+6
2008-01-25XACE: Remove the extension code entirely, XACE is completely static now.Eamon Walsh1-1/+0
2008-01-25XACE: Stop using fake requestVectors in favor of a simple hook call.Eamon Walsh1-3/+3
2008-01-25XACE: Don't need to actually register a protocol extension.Eamon Walsh1-3/+0
2007-12-17XACE: Restore the old background None behavior in response to bug #13683.Eamon Walsh1-0/+6
From the X11 protocol spec: "If background None is specified, the window has no defined background." This means that toolkits and apps cannot rely on the "transparent" nature of the current implementation! At some point before the next release, XACE will switch back to a solid background as the default.
2007-11-14Merge branch 'master' into XACE-SELINUXEamon Walsh1-0/+9
Conflicts: Xext/xace.c Xext/xace.h
2007-11-06Modified performance patches from Arjan van de Ven <arjan@infradead.org>Eamon Walsh1-0/+9
Subject: [PATCH] fix some performance gaps in Xace The XaceHook function is used in several hotpaths. The problem with it (performance wise) is twofold: * The XaceHook function has a big switch() statement for the hook number in it * The XaceHook function uses varargs to reassemble the final dispatch arguments again Both are expensive operations... for something that is known at compile time This patch turns the hotpath XaceHook call into a direct call to avoid the switch and varargs; this gives me over 10% performance gain on the x11perf benchmark.
2007-10-10xace: remove the special-cased "ignore" functionality from the property code.Eamon Walsh1-5/+0
There will be no more faking of Success to hide things. XACE does not provide polyinstantiation.
2007-09-28xace: remove obsoleted DRAWABLE_ACCESS hook.Eamon Walsh1-14/+13
2007-08-29xace: drop map-window checking hook, add new hooks for controlling theEamon Walsh1-12/+13
delivery of events to windows and clients. This is tentative. It's likely that an additional last-resort hook will be necessary for code that calls TryClientEvents or WriteEventsToClient directly. It's also possible that new xace machinery will be necessary to classify events and pull useful resource ID's out of them. The failure case also needs some thinking through. Should event delivery "succeed" or should it report undeliverable? Finally, XKB appears to call WriteToClient to pass events. Sigh.
2007-08-16xace: drop background-none checking hook, add new hook for controllingEamon Walsh1-1/+1
access to other clients.
2007-08-15xace: rename hostlist security hook to "server" as this hook will be usedEamon Walsh1-1/+1
for other types of server access besides just the host list.
2007-08-06xace: drop site-policy and declare-extension-security hooks, add 2 new hooksEamon Walsh1-2/+2
for controlling access to screens and screen savers.
2007-04-17xace: change the semantics of the return value of XACE hooks to allowEamon Walsh1-6/+6
arbitrary X status codes instead of just TRUE/FALSE. The dix layer in most cases still does not propagate the return value of XACE hooks back to the client, however. There is more error propagation work to do.
2007-03-26Merge branch 'master' into XACE-SELINUXEamon Walsh1-10/+0
2007-03-25Static and dead code cleaup for Xext/Adam Jackson1-10/+0
2007-03-21xace: bump major version since the hooks have changed.Eamon Walsh1-1/+1
2007-03-21xace: add XACE_SELECTION_ACCESS hook for selection redirection/access.Eamon Walsh1-7/+8
2007-03-19xace: drop XACE_WINDOW_INIT hook, it has been superseded by ↵Eamon Walsh1-4/+3
ResourceStateCallback.
2006-12-01Naming change: Security*Operation -> Xace*OperationEamon Walsh1-5/+5
2006-12-01Define calls away when not building XACE, allowing ifdef's to be removed.Eamon Walsh1-5/+21
2006-08-25Add four new XACE hooks: auditing, key event notification, window initEamon Walsh1-1/+5
2006-08-03Remove LBX code.Eamon Walsh1-10/+1
2006-08-02Rebase Security extension to use devPrivates for storing security state.Eamon Walsh1-16/+0
2006-06-20Add XACE extension source files.Eamon Walsh1-0/+124
(Copied from XACE-SELINUX branch in Xorg monolith CVS since these were never imported to modular cvs or git trees.)