1 files changed, 60 insertions, 0 deletions
diff --git a/Kernel/Security/Jail.h b/Kernel/Security/Jail.h
new file mode 100644
index 0000000000..72817db310
--- /dev/null
+++ b/Kernel/Security/Jail.h
@@ -0,0 +1,60 @@
+/*
+ * Copyright (c) 2022-2023, Liav A. <liavalb@hotmail.co.il>
+ *
+ * SPDX-License-Identifier: BSD-2-Clause
+ */
+
+#pragma once
+
+#include <AK/AtomicRefCounted.h>
+#include <AK/DistinctNumeric.h>
+#include <AK/Error.h>
+#include <AK/IntrusiveList.h>
+#include <AK/IntrusiveListRelaxedConst.h>
+#include <AK/OwnPtr.h>
+#include <AK/RefPtr.h>
+#include <AK/Try.h>
+#include <AK/Types.h>
+#include <Kernel/KString.h>
+#include <Kernel/Locking/SpinlockProtected.h>
+#include <Kernel/Process.h>
+
+namespace Kernel {
+
+class ProcessList;
+
+AK_TYPEDEF_DISTINCT_ORDERED_ID(u64, JailIndex);
+
+class Jail : public AtomicRefCounted<Jail> {
+
+public:
+    RefPtr<ProcessList> process_list();
+
+    static RefPtr<Jail> find_by_index(JailIndex);
+    static ErrorOr<NonnullRefPtr<Jail>> create(NonnullOwnPtr<KString> name, unsigned flags);
+    static ErrorOr<void> for_each_when_process_is_not_jailed(Function<ErrorOr<void>(Jail const&)> callback);
+
+    StringView name() const { return m_name->view(); }
+    JailIndex index() const { return m_index; }
+
+    void detach(Badge<Process>);
+    SpinlockProtected<size_t, LockRank::None>& attach_count() { return m_attach_count; }
+
+private:
+    Jail(NonnullOwnPtr<KString>, JailIndex, RefPtr<ProcessList>);
+
+    NonnullOwnPtr<KString> m_name;
+    JailIndex const m_index;
+
+    IntrusiveListNode<Jail, NonnullRefPtr<Jail>> m_list_node;
+
+public:
+    using List = IntrusiveListRelaxedConst<&Jail::m_list_node>;
+
+private:
+    RefPtr<ProcessList> const m_process_list;
+
+    SpinlockProtected<size_t, LockRank::None> m_attach_count { 0 };
+};
+
+}