Lines Matching full:points
55 The framework provides a series of entry points which must be called by
57 control points and object creation.
59 opportunity to modify security behavior at those MAC API entry points.
66 points, sockets, mbufs, bpf descriptors, network interfaces, IP fragment
72 The MAC API provides a large set of entry points, too broad to specifically
74 In general, these entry points represent an access control check or other
96 API entry points, a variety of object creation and destruction calls,
97 and a large set of access control check points.
98 In the future, additional audit entry points will also be present.
99 Module authors may choose to only implement a subset of the entry points,
104 Module writers must be aware of the locking semantics of entry points
105 that they implement: MAC API entry points will have specific locking
111 MAC module writers must also be aware that MAC API entry points will
126 .Ss Adding New MAC Entry Points
134 New entry points must be carefully documented so as to prevent any
136 Introducing new entry points requires four distinct pieces of work:
138 scattering these MAC API entry points throughout the new or modified
141 the new entry points so that they may consistently enforce their
143 .Sh ENTRY POINTS