pub fn last_badge(ctx: &ServiceContext) -> Option<(u64, u8)>Expand description
The resource id and right the kernel badged the message just received with.
None means the message was an ordinary name-addressed request rather than a capability
invocation. The badge is set BY THE KERNEL after it validated the capability, so it cannot be
forged by a client sending over its ordinary send capability - which is what makes it safe to act
on. Enforce op <= right yourself: the kernel checked the capability, not what you do with it.