replacing umlaute and fixing address in headers Haldeneggsteig -> Universitaetsstrasse

Signed-off-by: Reto Achermann <reto.achermann@inf.ethz.ch>

kernel,monitor: implement reclaiming of previously dropped ram caps.

Until now, if the kernel couldn't return a freed region of physical
memory to the monitor, e.g. because the monitor was not ready yet, or
the monitor's receive slot is already occupied, it would drop the range
and print a diagnostic message.

With this change, the cpu driver has 4 slots per KCB in which it can
store a range that would be dropped. The monitor gets a new kernel cap
invocation which allows it to retrieve one of the stored slots, if any.
The monitor runs a deferred event loop which checks if there's a range
to retrieve every second, and forwards any retrieved ranges to the
memory server.

The retrieval is very similar to a capops delete step, but does not
happen inside the capops machinery because the need for an action are
not coupled to a capability operation.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

doc: tn13: update capability type section

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T274: armv8: update monitor invocations and cleanup changes

Closes T274.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T276: Fix monitor revoke check to check for overlapping descendants instead of any descendants

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T274: Fix remote retype

Properly propagate source and destiation root cnode throughout monitor retype
code and fix kernel code for monitor cap creation and monitor retype.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T273: x86_64: distributed capability operations updated to new cspace layout

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

monitor: move simple monitor invocations into arch-independent header

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T258, T264, T270: Implement two-level cspace layout using L1/L2 CNode objects.

distops functionality is NYI.

This commit also makes the root cnodes explicit for sys_map(), closes T270.

Notable changes:
* LRPC LMP endpoints are regular capabilities in L2 cnode, no longer in root
cnode.
* Capability operations take a capability address for the root cnode relative
to which capability addresses are to be resolved. The root cnode capability
address must be resolvable in the current domains cspace.

Closes T264.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T191: update monitor capops retype

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

Implemented monitor_delete_foreign invocation.

This invocation is used when deleting the last copy of a non-moveable
cap on its owning core. In this case, because the owner cannot be
migrated, all foreign caps must also be deleted, for which this
invocation is run on each monitor with foreign copies.

Keep cptrs right-shifted throughout capops.

Rewrote distributed revoke and delete handling.

Implemented support for "give_away" transfers in capops_copy.

Added individual remote relations bits for copies/ancestors/descendants.

Implemented "has_descendants" for retype.

Implemented monitor_copy_existing invocation.

Integrated delete & revoke handling.

Added monitor_create_caps invocation.

Changed API to better support caps from other domains.

In particular, this uses a (capref, capaddr, bits) tuple whenever a copy
a reference to a particular cap/slot is necessary, and thus copying the
cap in question is not possible.

Implemented monitor_(un)lock_cap.

Implemented get/set owner monitor invocations.

Split up and moved around monitor's private includes.