summaryrefslogtreecommitdiff
path: root/Xext/xace.c
AgeCommit message (Collapse)AuthorFilesLines
2009-09-02Correct outdated e-mail address in "Author" statements.Eamon Walsh1-1/+1
Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
2009-07-07The way XaceHook() mixes struct initializers and va_arg() is not portable andMichael Lorenz1-63/+53
gives bogus data on sparc and probably others leading to a crash. Fix: Don't use initializers, instead set each member directly to enforce order. Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
2009-01-22Remove a bunch of useless casts.Adam Jackson1-1/+1
We've had void * for twenty years now people let's try to act like we know how it works.
2009-01-11Xext: ANSI cleanupsJulien Cristau1-9/+8
2008-12-18xace: Export wrappers around two Xtrans functions used by modules.Eamon Walsh1-0/+20
Don't know a better way to do this, since Xtrans isn't a library that can be linked into modules.
2008-12-18Add xace headers to the SDK when enabled and export the XaceHooks symbolEamon Walsh1-1/+1
to modules.
2008-12-03Rework symbol visibility for easier maintenancePaulo Cesar Pereira de Andrade1-1/+1
Save in a few special cases, _X_EXPORT should not be used in C source files. Instead, it should be used in headers, and the proper C source include that header. Some special cases are symbols that need to be shared between modules, but not expected to be used by external drivers, and symbols that are accessible via LoaderSymbol/dlopen. This patch also adds conditionally some new sdk header files, depending on extensions enabled. These files were added to match pattern for other extensions/modules, that is, have the headers "deciding" symbol visibility in the sdk. These headers are: o Xext/panoramiXsrv.h, Xext/panoramiX.h o fbpict.h (unconditionally) o vidmodeproc.h o mioverlay.h (unconditionally, used only by xaa) o xfixes.h (unconditionally, symbols required by dri2) LoaderSymbol and similar functions now don't have different prototypes, in loaderProcs.h and xf86Module.h, so that both headers can be included, without the need of defining IN_LOADER. xf86NewInputDevice() device prototype readded to xf86Xinput.h, but not exported (and with a comment about it).
2008-12-02Add visibility flags to XSERVER_CFLAGS.Paulo Cesar Pereira de Andrade1-1/+1
This is done to actually change DIX_CFLAGS, as not all "modules" use XORG_CFLAGS. Also export the symbols that are required by other modules after the change.
2008-02-29XACE: Add generic support for property and selection polyinstantiation.Eamon Walsh1-4/+5
2008-02-12XACE: Move the selection access hook to its own function.Eamon Walsh1-11/+7
2008-02-05XACE: Push the dix "structure" includes down to the security modules.Eamon Walsh1-0/+4
2008-02-05XACE: Move the property access hook to its own function.Eamon Walsh1-12/+8
2008-01-25XACE: Remove the extension code entirely, XACE is completely static now.Eamon Walsh1-9/+0
2008-01-25XACE: Stop using fake requestVectors in favor of a simple hook call.Eamon Walsh1-121/+18
2008-01-25XACE: Don't need to actually register a protocol extension.Eamon Walsh1-50/+0
2008-01-03XACE: DeleteCallbackList zeroes out its argument so don't do it twice.Eamon Walsh1-3/+0
2008-01-03Bug #13765: Heap corruption in XC-SECURITY extension code.Eamon Walsh1-1/+1
2007-11-14Merge branch 'master' into XACE-SELINUXEamon Walsh1-44/+31
Conflicts: Xext/xace.c Xext/xace.h
2007-11-06Modified performance patches from Arjan van de Ven <arjan@infradead.org>Eamon Walsh1-26/+21
Subject: [PATCH] fix some performance gaps in Xace The XaceHook function is used in several hotpaths. The problem with it (performance wise) is twofold: * The XaceHook function has a big switch() statement for the hook number in it * The XaceHook function uses varargs to reassemble the final dispatch arguments again Both are expensive operations... for something that is known at compile time This patch turns the hotpath XaceHook call into a direct call to avoid the switch and varargs; this gives me over 10% performance gain on the x11perf benchmark.
2007-11-05Merge branch 'master' into XACE-SELINUXEamon Walsh1-2/+2
Conflicts: dix/dispatch.c dix/property.c hw/xfree86/common/xf86VidMode.c include/xkbsrv.h render/glyph.c xkb/xkbActions.c
2007-11-05Xext: Remove usage of allocaDaniel Stone1-2/+2
Replace with heap allocations.
2007-10-23xace: Still more changes to selection code. Removed the SelectionPtr fromEamon Walsh1-1/+0
the hook - the hook only needs the Atom to control access to the selection object. Upgraded the SelectionCallback to take a client argument and additional type codes so that it can be used for redirection.
2007-10-17xace: Add an access_mode field to the extension structure.Eamon Walsh1-2/+13
This allows the same callback to be used for both extension hooks.
2007-09-28xace: remove obsoleted DRAWABLE_ACCESS hook.Eamon Walsh1-10/+0
2007-09-05xace: add new fields to resource access hook to allow parent resource objectsEamon Walsh1-1/+3
to be passed in at create time. Also added a missing devPrivates initializer.
2007-08-30xace: add hooks + new access codes: XFixes extension.Eamon Walsh1-0/+1
Required a new name argument to the selection access hook to handle XFixesSelectSelectionInput.
2007-08-29xace: drop map-window checking hook, add new hooks for controlling theEamon Walsh1-2/+17
delivery of events to windows and clients. This is tentative. It's likely that an additional last-resort hook will be necessary for code that calls TryClientEvents or WriteEventsToClient directly. It's also possible that new xace machinery will be necessary to classify events and pull useful resource ID's out of them. The failure case also needs some thinking through. Should event delivery "succeed" or should it report undeliverable? Finally, XKB appears to call WriteToClient to pass events. Sigh.
2007-08-28xace: add hooks + new access codes: core protocol input requestsEamon Walsh1-1/+1
2007-08-16xace: drop background-none checking hook, add new hook for controllingEamon Walsh1-2/+12
access to other clients.
2007-08-15xace: rename hostlist security hook to "server" as this hook will be usedEamon Walsh1-2/+2
for other types of server access besides just the host list.
2007-08-06xace: drop site-policy and declare-extension-security hooks, add 2 new hooksEamon Walsh1-13/+7
for controlling access to screens and screen savers.
2007-04-17xace: change the semantics of the return value of XACE hooks to allowEamon Walsh1-24/+25
arbitrary X status codes instead of just TRUE/FALSE. The dix layer in most cases still does not propagate the return value of XACE hooks back to the client, however. There is more error propagation work to do.
2007-03-26Merge branch 'master' into XACE-SELINUXEamon Walsh1-2/+2
2007-03-25Static and dead code cleaup for Xext/Adam Jackson1-2/+2
2007-03-22xace: drop the name argument from the property callback.Eamon Walsh1-1/+0
2007-03-22xace: add new argument to property hook for property structure itself.Eamon Walsh1-2/+1
2007-03-21xace: add access_mode argument to selection hook.Eamon Walsh1-0/+1
2007-03-21xace: add XACE_SELECTION_ACCESS hook for selection redirection/access.Eamon Walsh1-0/+10
2007-03-19xace: drop XACE_WINDOW_INIT hook, it has been superseded by ↵Eamon Walsh1-8/+0
ResourceStateCallback.
2006-12-01Naming change: Security*Operation -> Xace*OperationEamon Walsh1-1/+1
2006-11-08xace: avoid 'unused variable pScreen'Daniel Stone1-1/+3
Initialise pScreen explicitly, as REGION_* macros ignore pScreen.
2006-09-08Include dix-config.h.Eamon Walsh1-0/+4
2006-08-25Add four new XACE hooks: auditing, key event notification, window initEamon Walsh1-0/+33
2006-08-03Remove LBX code.Eamon Walsh1-30/+0
2006-08-02Rebase Security extension to use devPrivates for storing security state.Eamon Walsh1-48/+0
2006-06-20Add XACE extension source files.Eamon Walsh1-0/+537
(Copied from XACE-SELINUX branch in Xorg monolith CVS since these were never imported to modular cvs or git trees.)