sys::perm
service
The sys::perm
service is used to manage the privileges of users and the permissions of processes.
The purpose of user privileges
In NightOS, executable instructions can run in three different contexts:
- In applications
- In system services
- In the kernel itself
The kernel doesn't have any limitation on what tasks it is allowed to perform, of course, as it is the one to decide.
System services communicate directly with the kernel and are trusted processes so they can do anything in their domain, which means for instance the sys::net
cannot ask to manipulate the filesystem, as it's the role of sys::fs
.
But applications, who run userland processes TODO
List of permissions
The list of permissions can be found in the dedicated specifications document.
Methods
TODO
Notifications
TODO