These docs are under active development and cover the v0.20 Kobicha security model.

IPC

Concept
Pipes and FIFOs

Anonymous and named pipes on Peios — pipe/pipe2/FIFO syscalls, packet mode, the splice family, and how filesystem SDs gate FIFOs.

Concept
Unix Domain Sockets

Unix domain sockets on Peios — socket types, the three address forms, and the security implications of the abstract namespace.

Concept
Peer Credentials

Peer authentication on Unix sockets — the SO_PEERCRED family, the new SO_PEERTOKEN and SO_PEERGUID, and the recommended Peios authentication patterns.

Concept
FD Passing

Passing file descriptors between processes on Peios via SCM_RIGHTS — the fd-bearer-authority model and its security implications.

Concept
System V IPC

System V IPC on Peios — semaphores, message queues, shared memory, and the security descriptor model that replaces the legacy ipc_perm 9-bit mode.

Concept
POSIX IPC

POSIX IPC primitives on Peios — POSIX semaphores, POSIX message queues, and how they inherit access control from their backing filesystems.

Concept
Event-bearing File Descriptors

File descriptors that deliver kernel events on Peios — eventfd, signalfd, timerfd, pidfd, and the access-controlled cross-process pidfd_getfd primitive.

Concept
epoll and Polling

File-descriptor readiness on Peios — epoll, poll, select, and the patterns for high-throughput event-driven services.

Concept
io_uring

io_uring on Peios — the shared-ring async I/O interface, how it routes through standard KACS hooks, and the registry knobs for SQPOLL and URING_CMD.

Concept
Futexes

Futexes on Peios — the userspace-fast-path kernel-fallback synchronisation primitive used by every modern threading library.

reference
Other IPC Primitives

Smaller IPC primitives on Peios — kcmp for kernel object comparison, membarrier for cross-CPU memory barriers, and cross-memory-attach syscalls.