Lines Matching full:privilege
34 .Nd kernel privilege checking API
51 privilege checking interface.
55 The caller identifies the desired privilege via the
58 .Ss Privilege Policies
60 the superuser policy, which grants privilege based on the effective (or
69 When adding a new privilege check to a code path, first check the complete
72 to see if one already exists for the class of privilege required.
73 Only if there is not an exact match should a new privilege be added to the
74 privilege list.
75 As privilege numbers becomes encoded in the kernel module ABI, privilege
78 When adding a new privilege, be certain to also determine whether it should
87 driver-specific privilege.
94 will wish to directly return the error code from a failed privilege check to
99 call if privilege is not granted rather than changing the semantics of the
104 insufficient privilege is highly undesirable, as it results in frequent
105 privilege checks, and the caller is unable to tell if an access control