replace ad hoc driver loading with a proper driver manager, new DDK, new PnP manager with device matching, asynchronous startup, resource ownership and removal, add shared PCI capability helpers, replace typed, rigid services with a proper service manager, implement proper system shutdown and restart, shutting down unloads drivers and shuts down services, add simple power button, remove heavyweight boot self-tests and SMP stress runs, add monotonic timestamps to kernel debug output, fruitless USB and PS/2 fixes, make test builds opt in.

code/public/ntlite/security.h

@@ -7,27 +7,22 @@
 #include <ntlite/status.h>
 
 typedef uint32_t SYS_PRIVILEGES;
-typedef uint32_t SYS_SERVICE_CLAIMS;
 
 // Ambient privileges are reserved for kernel-mediated authority that is not represented by an object capability yet.
 #define SYS_PRIV_PROCESS_OPEN_ANY          0x00000001u
 #define SYS_PRIV_PROCESS_ENUMERATE         0x00000002u
 #define SYS_PRIV_THREAD_ENUMERATE_ANY      0x00000004u
 #define SYS_PRIV_KERNEL_DIAGNOSTICS        0x00000008u
+#define SYS_PRIV_SYSTEM_POWER              0x00000010u
 #define SYS_PRIV_AUDIO_ACCESS              0x00000020u
 #define SYS_PRIV_AUDIO_MASTER_CONTROL      0x00000040u
 #define SYS_PRIV_CONSOLE_ACCESS            0x00000080u
 #define SYS_PRIV_DISPLAY_ACCESS            0x00000100u
 #define SYS_PRIV_DEBUG_OUTPUT              0x00000200u
-#define SYS_PRIV_SYSTEM_SERVICE_REGISTER   0x00000400u
 #define SYS_PRIV_RAW_STORAGE               0x00000800u
 #define SYS_PRIV_FILESYSTEM_PROVIDER       0x00001000u
 #define SYS_PRIV_NETWORK_ACCESS            0x00002000u
-#define SYS_PRIV_ALL                       0x00003FEFu
-
-// Service claims constrain which well-known service identities a privileged context may register.
-#define SYS_SERVICE_CLAIM_RESOURCE         0x00000001u
-#define SYS_SERVICE_CLAIM_ALL              SYS_SERVICE_CLAIM_RESOURCE
+#define SYS_PRIV_ALL                       0x00003BFFu
 
 // Security-context-specific capability rights.
 #define SYS_SECURITY_CONTEXT_RIGHT_DERIVE  0x00000100u
@@ -41,8 +36,6 @@ typedef struct SYS_SECURITY_CONTEXT_INFO {
     uint32_t SecurityId;
     SYS_PRIVILEGES EffectivePrivileges;
     SYS_PRIVILEGES DelegablePrivileges;
-    SYS_SERVICE_CLAIMS ServiceClaims;
-    SYS_SERVICE_CLAIMS DelegableServiceClaims;
     uint32_t Flags;
 } SYS_SECURITY_CONTEXT_INFO;
 
@@ -51,8 +44,6 @@ typedef struct SYS_DERIVE_SECURITY_CONTEXT_REQUEST {
     SYS_HANDLE SourceContext;
     SYS_PRIVILEGES EffectivePrivileges;
     SYS_PRIVILEGES DelegablePrivileges;
-    SYS_SERVICE_CLAIMS ServiceClaims;
-    SYS_SERVICE_CLAIMS DelegableServiceClaims;
     uint32_t Flags;
     SYS_HANDLE* ContextHandleOut;
 } SYS_DERIVE_SECURITY_CONTEXT_REQUEST;