The oskit_avc interface specifies the methods provided by an access vector cache (AVC) component to object managers. These methods are used by object managers to perform permission checks, to notify the AVC component of completed operations and to register callbacks for policy changes.
The AVC entry reference type (oskit_avc_entry_ref_t) consists of a pointer to an entry in the AVC. The AVC returns a reference to the entry used for a permission check. An object manager may save this reference with the corresponding object for subsequent use in other permission checks on the object. An object manager must initialize a reference before its first use with the OSKIT_AVC_ENTRY_REF_INIT macro. An object manager may copy a reference with the OSKIT_AVC_ENTRY_REF_CPY macro. AVC entry references should only be dereferenced by the AVC functions.
The oskit_avc COM interface inherits from IUnknown, and has the following additional methods: