kernel: add k_object_access_revoke() system call
Does the opposite of k_object_access_grant(); the provided thread will
lose access to that kernel object.
If invoked from userspace the caller must hace sufficient access
to that object and permission on the thread being revoked access.
Fix documentation for k_object_access_grant() API to reflect that
permission on the thread parameter is needed as well.
Signed-off-by: Andrew Boie <andrew.p.boie@intel.com>
diff --git a/kernel/userspace_handler.c b/kernel/userspace_handler.c
index e0379d6..cc25e11 100644
--- a/kernel/userspace_handler.c
+++ b/kernel/userspace_handler.c
@@ -47,6 +47,18 @@
return 0;
}
+_SYSCALL_HANDLER2(k_object_access_revoke, object, thread)
+{
+ struct _k_object *ko;
+
+ _SYSCALL_OBJ(thread, K_OBJ_THREAD);
+ ko = validate_any_object((void *)object);
+ _SYSCALL_VERIFY_MSG(ko, "object %p access denied", (void *)object);
+ _thread_perms_clear(ko, (struct k_thread *)thread);
+
+ return 0;
+}
+
_SYSCALL_HANDLER1(k_object_access_all_grant, object)
{
struct _k_object *ko;
