mac_policy.h (7ba28492c591e95840a0fe2bbe14a0bd9194813f) | mac_policy.h (fb95b5d3c3d91d5c06e16abf161c11d4be32fb7a) |
---|---|
1/*- 2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson 3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc. 4 * All rights reserved. 5 * 6 * This software was developed by Robert Watson for the TrustedBSD Project. 7 * 8 * This software was developed for the FreeBSD Project in part by NAI Labs, --- 236 unchanged lines hidden (view full) --- 245 int (*mpo_check_proc_signal)(struct ucred *cred, 246 struct proc *proc, int signum); 247 int (*mpo_check_socket_bind)(struct ucred *cred, 248 struct socket *so, struct label *socketlabel, 249 struct sockaddr *sockaddr); 250 int (*mpo_check_socket_connect)(struct ucred *cred, 251 struct socket *so, struct label *socketlabel, 252 struct sockaddr *sockaddr); | 1/*- 2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson 3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc. 4 * All rights reserved. 5 * 6 * This software was developed by Robert Watson for the TrustedBSD Project. 7 * 8 * This software was developed for the FreeBSD Project in part by NAI Labs, --- 236 unchanged lines hidden (view full) --- 245 int (*mpo_check_proc_signal)(struct ucred *cred, 246 struct proc *proc, int signum); 247 int (*mpo_check_socket_bind)(struct ucred *cred, 248 struct socket *so, struct label *socketlabel, 249 struct sockaddr *sockaddr); 250 int (*mpo_check_socket_connect)(struct ucred *cred, 251 struct socket *so, struct label *socketlabel, 252 struct sockaddr *sockaddr); |
253 int (*mpo_check_socket_listen)(struct ucred *cred, 254 struct socket *so, struct label *socketlabel); 255 int (*mpo_check_socket_receive)(struct socket *so, | 253 int (*mpo_check_socket_deliver)(struct socket *so, |
256 struct label *socketlabel, struct mbuf *m, 257 struct label *mbuflabel); | 254 struct label *socketlabel, struct mbuf *m, 255 struct label *mbuflabel); |
256 int (*mpo_check_socket_listen)(struct ucred *cred, 257 struct socket *so, struct label *socketlabel); |
|
258 int (*mpo_check_socket_relabel)(struct ucred *cred, 259 struct socket *so, struct label *socketlabel, 260 struct label *newlabel); 261 int (*mpo_check_socket_visible)(struct ucred *cred, 262 struct socket *so, struct label *socketlabel); 263 int (*mpo_check_vnode_access)(struct ucred *cred, 264 struct vnode *vp, struct label *label, int flags); 265 int (*mpo_check_vnode_chdir)(struct ucred *cred, --- 140 unchanged lines hidden (view full) --- 406 MAC_CHECK_PIPE_IOCTL, 407 MAC_CHECK_PIPE_OP, 408 MAC_CHECK_PIPE_RELABEL, 409 MAC_CHECK_PROC_DEBUG, 410 MAC_CHECK_PROC_SCHED, 411 MAC_CHECK_PROC_SIGNAL, 412 MAC_CHECK_SOCKET_BIND, 413 MAC_CHECK_SOCKET_CONNECT, | 258 int (*mpo_check_socket_relabel)(struct ucred *cred, 259 struct socket *so, struct label *socketlabel, 260 struct label *newlabel); 261 int (*mpo_check_socket_visible)(struct ucred *cred, 262 struct socket *so, struct label *socketlabel); 263 int (*mpo_check_vnode_access)(struct ucred *cred, 264 struct vnode *vp, struct label *label, int flags); 265 int (*mpo_check_vnode_chdir)(struct ucred *cred, --- 140 unchanged lines hidden (view full) --- 406 MAC_CHECK_PIPE_IOCTL, 407 MAC_CHECK_PIPE_OP, 408 MAC_CHECK_PIPE_RELABEL, 409 MAC_CHECK_PROC_DEBUG, 410 MAC_CHECK_PROC_SCHED, 411 MAC_CHECK_PROC_SIGNAL, 412 MAC_CHECK_SOCKET_BIND, 413 MAC_CHECK_SOCKET_CONNECT, |
414 MAC_CHECK_SOCKET_DELIVER, |
|
414 MAC_CHECK_SOCKET_LISTEN, 415 MAC_CHECK_SOCKET_RELABEL, | 415 MAC_CHECK_SOCKET_LISTEN, 416 MAC_CHECK_SOCKET_RELABEL, |
416 MAC_CHECK_SOCKET_RECEIVE, | |
417 MAC_CHECK_SOCKET_VISIBLE, 418 MAC_CHECK_VNODE_ACCESS, 419 MAC_CHECK_VNODE_CHDIR, 420 MAC_CHECK_VNODE_CHROOT, 421 MAC_CHECK_VNODE_CREATE, 422 MAC_CHECK_VNODE_DELETE, 423 MAC_CHECK_VNODE_DELETEACL, 424 MAC_CHECK_VNODE_EXEC, --- 68 unchanged lines hidden --- | 417 MAC_CHECK_SOCKET_VISIBLE, 418 MAC_CHECK_VNODE_ACCESS, 419 MAC_CHECK_VNODE_CHDIR, 420 MAC_CHECK_VNODE_CHROOT, 421 MAC_CHECK_VNODE_CREATE, 422 MAC_CHECK_VNODE_DELETE, 423 MAC_CHECK_VNODE_DELETEACL, 424 MAC_CHECK_VNODE_EXEC, --- 68 unchanged lines hidden --- |