Device Driver Access Control

[zephyrbot]

Reported by Andrew Boie:

For memory protection we want to selectively grant threads access to device driver APIs, all-or-nothing may be too coarse for security concerns. However, it may not be feasible to implement this on all arches, as some MPU-based systems may have too few available regions to do this properly. Design an optional access control mechanism and APIs such that a thread can designate what drivers or subsystems it has access to before it drops supervisor privileges.

(Imported from Jira ZEP-2197)

[zephyrbot]

by Andrew Boie:

The current plan is to treat instances of struct device just like any other kernel object, using the same mechanism for permission tracking. So I think this JIRA may be a no-op.

[zephyrbot]

by Andrew Boie:

Same mechanism as kernel object access control.