mac_policy.h (7ba28492c591e95840a0fe2bbe14a0bd9194813f) mac_policy.h (fb95b5d3c3d91d5c06e16abf161c11d4be32fb7a)
1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by NAI Labs,

--- 236 unchanged lines hidden (view full) ---

245 int (*mpo_check_proc_signal)(struct ucred *cred,
246 struct proc *proc, int signum);
247 int (*mpo_check_socket_bind)(struct ucred *cred,
248 struct socket *so, struct label *socketlabel,
249 struct sockaddr *sockaddr);
250 int (*mpo_check_socket_connect)(struct ucred *cred,
251 struct socket *so, struct label *socketlabel,
252 struct sockaddr *sockaddr);
1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by NAI Labs,

--- 236 unchanged lines hidden (view full) ---

245 int (*mpo_check_proc_signal)(struct ucred *cred,
246 struct proc *proc, int signum);
247 int (*mpo_check_socket_bind)(struct ucred *cred,
248 struct socket *so, struct label *socketlabel,
249 struct sockaddr *sockaddr);
250 int (*mpo_check_socket_connect)(struct ucred *cred,
251 struct socket *so, struct label *socketlabel,
252 struct sockaddr *sockaddr);
253 int (*mpo_check_socket_listen)(struct ucred *cred,
254 struct socket *so, struct label *socketlabel);
255 int (*mpo_check_socket_receive)(struct socket *so,
253 int (*mpo_check_socket_deliver)(struct socket *so,
256 struct label *socketlabel, struct mbuf *m,
257 struct label *mbuflabel);
254 struct label *socketlabel, struct mbuf *m,
255 struct label *mbuflabel);
256 int (*mpo_check_socket_listen)(struct ucred *cred,
257 struct socket *so, struct label *socketlabel);
258 int (*mpo_check_socket_relabel)(struct ucred *cred,
259 struct socket *so, struct label *socketlabel,
260 struct label *newlabel);
261 int (*mpo_check_socket_visible)(struct ucred *cred,
262 struct socket *so, struct label *socketlabel);
263 int (*mpo_check_vnode_access)(struct ucred *cred,
264 struct vnode *vp, struct label *label, int flags);
265 int (*mpo_check_vnode_chdir)(struct ucred *cred,

--- 140 unchanged lines hidden (view full) ---

406 MAC_CHECK_PIPE_IOCTL,
407 MAC_CHECK_PIPE_OP,
408 MAC_CHECK_PIPE_RELABEL,
409 MAC_CHECK_PROC_DEBUG,
410 MAC_CHECK_PROC_SCHED,
411 MAC_CHECK_PROC_SIGNAL,
412 MAC_CHECK_SOCKET_BIND,
413 MAC_CHECK_SOCKET_CONNECT,
258 int (*mpo_check_socket_relabel)(struct ucred *cred,
259 struct socket *so, struct label *socketlabel,
260 struct label *newlabel);
261 int (*mpo_check_socket_visible)(struct ucred *cred,
262 struct socket *so, struct label *socketlabel);
263 int (*mpo_check_vnode_access)(struct ucred *cred,
264 struct vnode *vp, struct label *label, int flags);
265 int (*mpo_check_vnode_chdir)(struct ucred *cred,

--- 140 unchanged lines hidden (view full) ---

406 MAC_CHECK_PIPE_IOCTL,
407 MAC_CHECK_PIPE_OP,
408 MAC_CHECK_PIPE_RELABEL,
409 MAC_CHECK_PROC_DEBUG,
410 MAC_CHECK_PROC_SCHED,
411 MAC_CHECK_PROC_SIGNAL,
412 MAC_CHECK_SOCKET_BIND,
413 MAC_CHECK_SOCKET_CONNECT,
414 MAC_CHECK_SOCKET_DELIVER,
414 MAC_CHECK_SOCKET_LISTEN,
415 MAC_CHECK_SOCKET_RELABEL,
415 MAC_CHECK_SOCKET_LISTEN,
416 MAC_CHECK_SOCKET_RELABEL,
416 MAC_CHECK_SOCKET_RECEIVE,
417 MAC_CHECK_SOCKET_VISIBLE,
418 MAC_CHECK_VNODE_ACCESS,
419 MAC_CHECK_VNODE_CHDIR,
420 MAC_CHECK_VNODE_CHROOT,
421 MAC_CHECK_VNODE_CREATE,
422 MAC_CHECK_VNODE_DELETE,
423 MAC_CHECK_VNODE_DELETEACL,
424 MAC_CHECK_VNODE_EXEC,

--- 68 unchanged lines hidden ---
417 MAC_CHECK_SOCKET_VISIBLE,
418 MAC_CHECK_VNODE_ACCESS,
419 MAC_CHECK_VNODE_CHDIR,
420 MAC_CHECK_VNODE_CHROOT,
421 MAC_CHECK_VNODE_CREATE,
422 MAC_CHECK_VNODE_DELETE,
423 MAC_CHECK_VNODE_DELETEACL,
424 MAC_CHECK_VNODE_EXEC,

--- 68 unchanged lines hidden ---