1ddcdf265SRobert Watson /*- 2f6a41092SRobert Watson * Copyright (c) 1999-2002 Robert N. M. Watson 37f53207bSRobert Watson * Copyright (c) 2001-2005 Networks Associates Technology, Inc. 41d82b391SRobert Watson * Copyright (c) 2005-2006 SPARTA, Inc. 5ddcdf265SRobert Watson * All rights reserved. 6ddcdf265SRobert Watson * 7ddcdf265SRobert Watson * This software was developed by Robert Watson for the TrustedBSD Project. 8ddcdf265SRobert Watson * 96201265bSRobert Watson * This software was developed for the FreeBSD Project in part by Network 106201265bSRobert Watson * Associates Laboratories, the Security Research Division of Network 116201265bSRobert Watson * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), 126201265bSRobert Watson * as part of the DARPA CHATS research program. 13ddcdf265SRobert Watson * 14d26dd2d9SRobert Watson * This software was enhanced by SPARTA ISSO under SPAWAR contract 15d26dd2d9SRobert Watson * N66001-04-C-6019 ("SEFOS"). 16d26dd2d9SRobert Watson * 17ddcdf265SRobert Watson * Redistribution and use in source and binary forms, with or without 18ddcdf265SRobert Watson * modification, are permitted provided that the following conditions 19ddcdf265SRobert Watson * are met: 20ddcdf265SRobert Watson * 1. Redistributions of source code must retain the above copyright 21ddcdf265SRobert Watson * notice, this list of conditions and the following disclaimer. 22ddcdf265SRobert Watson * 2. Redistributions in binary form must reproduce the above copyright 23ddcdf265SRobert Watson * notice, this list of conditions and the following disclaimer in the 24ddcdf265SRobert Watson * documentation and/or other materials provided with the distribution. 25ddcdf265SRobert Watson * 26ddcdf265SRobert Watson * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 27ddcdf265SRobert Watson * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 28ddcdf265SRobert Watson * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 29ddcdf265SRobert Watson * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 30ddcdf265SRobert Watson * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 31ddcdf265SRobert Watson * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 32ddcdf265SRobert Watson * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 33ddcdf265SRobert Watson * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 34ddcdf265SRobert Watson * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 35ddcdf265SRobert Watson * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 36ddcdf265SRobert Watson * SUCH DAMAGE. 37ddcdf265SRobert Watson * 38ddcdf265SRobert Watson * $FreeBSD$ 39ddcdf265SRobert Watson */ 40ddcdf265SRobert Watson /* 41ddcdf265SRobert Watson * Kernel interface for MAC policy modules. 42ddcdf265SRobert Watson */ 43d02188c1SRobert Watson #ifndef _SYS_SECURITY_MAC_MAC_POLICY_H_ 44d02188c1SRobert Watson #define _SYS_SECURITY_MAC_MAC_POLICY_H_ 45ddcdf265SRobert Watson 46c96ae196SRobert Watson #ifndef _KERNEL 47c96ae196SRobert Watson #error "no user-serviceable parts inside" 48c96ae196SRobert Watson #endif 49c96ae196SRobert Watson 50ddcdf265SRobert Watson /*- 51ddcdf265SRobert Watson * Pluggable access control policy definition structure. 52ddcdf265SRobert Watson * 536baacecdSRobert Watson * List of operations that are performed as part of the implementation of a 546baacecdSRobert Watson * MAC policy. Policy implementors declare operations with a mac_policy_ops 556baacecdSRobert Watson * structure, and using the MAC_POLICY_SET() macro. If an entry point is not 566baacecdSRobert Watson * declared, then then the policy will be ignored during evaluation of that 576baacecdSRobert Watson * event or check. 58ddcdf265SRobert Watson * 59ddcdf265SRobert Watson * Operations are sorted first by general class of operation, then 60ddcdf265SRobert Watson * alphabetically. 61ddcdf265SRobert Watson */ 62aed55708SRobert Watson #include <sys/acl.h> /* XXX acl_type_t */ 63aed55708SRobert Watson 6416fd30bdSRobert Watson struct acl; 6518717f69SRobert Watson struct auditinfo; 66343cc83eSPeter Wemm struct auditinfo_addr; 67f47cb886SRobert Watson struct bpf_d; 6817451386SRobert Watson struct cdev; 6916fd30bdSRobert Watson struct componentname; 7016fd30bdSRobert Watson struct devfs_dirent; 71f47cb886SRobert Watson struct ifnet; 72f47cb886SRobert Watson struct image_params; 73a557af22SRobert Watson struct inpcb; 7416fd30bdSRobert Watson struct ipq; 7552648411SRobert Watson struct ksem; 7616fd30bdSRobert Watson struct label; 77ddcdf265SRobert Watson struct mac_policy_conf; 7816fd30bdSRobert Watson struct mbuf; 7916fd30bdSRobert Watson struct mount; 80198e7d90SRobert Watson struct msg; 8142726d8aSRobert Watson struct msqid_kernel; 824795b82cSRobert Watson struct pipepair; 83f97e834bSRobert Watson struct proc; 84f51e5803SRobert Watson struct sbuf; 8542726d8aSRobert Watson struct semid_kernel; 8642726d8aSRobert Watson struct shmid_kernel; 87f97e834bSRobert Watson struct sockaddr; 8816fd30bdSRobert Watson struct socket; 8963dba32bSPawel Jakub Dawidek struct sysctl_oid; 9063dba32bSPawel Jakub Dawidek struct sysctl_req; 91f97e834bSRobert Watson struct thread; 9216fd30bdSRobert Watson struct ucred; 9316fd30bdSRobert Watson struct uio; 94f47cb886SRobert Watson struct vattr; 9516fd30bdSRobert Watson struct vnode; 961d82b391SRobert Watson 97ddcdf265SRobert Watson /* 98ddcdf265SRobert Watson * Policy module operations. 99ddcdf265SRobert Watson */ 1001d82b391SRobert Watson typedef void (*mpo_destroy_t)(struct mac_policy_conf *mpc); 1011d82b391SRobert Watson typedef void (*mpo_init_t)(struct mac_policy_conf *mpc); 102ddcdf265SRobert Watson 103ddcdf265SRobert Watson /* 1043459e1d2SRobert Watson * General policy-directed security system call so that policies may 1056baacecdSRobert Watson * implement new services without reserving explicit system call numbers. 10627f2eac7SRobert Watson */ 1071d82b391SRobert Watson typedef int (*mpo_syscall_t)(struct thread *td, int call, void *arg); 1081d82b391SRobert Watson 1091d82b391SRobert Watson /* 1101d82b391SRobert Watson * Place-holder function pointers for ABI-compatibility purposes. 1111d82b391SRobert Watson */ 1121d82b391SRobert Watson typedef void (*mpo_placeholder_t)(void); 11327f2eac7SRobert Watson 11427f2eac7SRobert Watson /* 1156baacecdSRobert Watson * Label operations. Initialize label storage, destroy label storage, 1166baacecdSRobert Watson * recycle for re-use without init/destroy, copy a label to initialized 1176baacecdSRobert Watson * storage, and externalize/internalize from/to initialized storage. 118ddcdf265SRobert Watson */ 1191d82b391SRobert Watson typedef void (*mpo_init_bpfdesc_label_t)(struct label *label); 1201d82b391SRobert Watson typedef void (*mpo_init_cred_label_t)(struct label *label); 12130575990SRobert Watson typedef void (*mpo_init_devfs_label_t)(struct label *label); 1221d82b391SRobert Watson typedef void (*mpo_init_ifnet_label_t)(struct label *label); 1231d82b391SRobert Watson typedef int (*mpo_init_inpcb_label_t)(struct label *label, int flag); 1241d82b391SRobert Watson typedef void (*mpo_init_sysv_msgmsg_label_t)(struct label *label); 1251d82b391SRobert Watson typedef void (*mpo_init_sysv_msgqueue_label_t)(struct label *label); 1261d82b391SRobert Watson typedef void (*mpo_init_sysv_sem_label_t)(struct label *label); 1271d82b391SRobert Watson typedef void (*mpo_init_sysv_shm_label_t)(struct label *label); 1281d82b391SRobert Watson typedef int (*mpo_init_ipq_label_t)(struct label *label, int flag); 1291d82b391SRobert Watson typedef int (*mpo_init_mbuf_label_t)(struct label *label, int flag); 1301d82b391SRobert Watson typedef void (*mpo_init_mount_label_t)(struct label *label); 1311d82b391SRobert Watson typedef int (*mpo_init_socket_label_t)(struct label *label, int flag); 1321d82b391SRobert Watson typedef int (*mpo_init_socket_peer_label_t)(struct label *label, 1331d82b391SRobert Watson int flag); 1341d82b391SRobert Watson typedef void (*mpo_init_pipe_label_t)(struct label *label); 1351d82b391SRobert Watson typedef void (*mpo_init_posix_sem_label_t)(struct label *label); 1361d82b391SRobert Watson typedef void (*mpo_init_proc_label_t)(struct label *label); 1371d82b391SRobert Watson typedef void (*mpo_init_vnode_label_t)(struct label *label); 1381d82b391SRobert Watson typedef void (*mpo_destroy_bpfdesc_label_t)(struct label *label); 1391d82b391SRobert Watson typedef void (*mpo_destroy_cred_label_t)(struct label *label); 14030575990SRobert Watson typedef void (*mpo_destroy_devfs_label_t)(struct label *label); 1411d82b391SRobert Watson typedef void (*mpo_destroy_ifnet_label_t)(struct label *label); 1421d82b391SRobert Watson typedef void (*mpo_destroy_inpcb_label_t)(struct label *label); 1431d82b391SRobert Watson typedef void (*mpo_destroy_sysv_msgmsg_label_t)(struct label *label); 1441d82b391SRobert Watson typedef void (*mpo_destroy_sysv_msgqueue_label_t)(struct label *label); 1451d82b391SRobert Watson typedef void (*mpo_destroy_sysv_sem_label_t)(struct label *label); 1461d82b391SRobert Watson typedef void (*mpo_destroy_sysv_shm_label_t)(struct label *label); 1471d82b391SRobert Watson typedef void (*mpo_destroy_ipq_label_t)(struct label *label); 1481d82b391SRobert Watson typedef void (*mpo_destroy_mbuf_label_t)(struct label *label); 1491d82b391SRobert Watson typedef void (*mpo_destroy_mount_label_t)(struct label *label); 1501d82b391SRobert Watson typedef void (*mpo_destroy_socket_label_t)(struct label *label); 1511d82b391SRobert Watson typedef void (*mpo_destroy_socket_peer_label_t)(struct label *label); 1521d82b391SRobert Watson typedef void (*mpo_destroy_pipe_label_t)(struct label *label); 1531d82b391SRobert Watson typedef void (*mpo_destroy_posix_sem_label_t)(struct label *label); 1541d82b391SRobert Watson typedef void (*mpo_destroy_proc_label_t)(struct label *label); 1551d82b391SRobert Watson typedef void (*mpo_destroy_vnode_label_t)(struct label *label); 1561d82b391SRobert Watson typedef void (*mpo_cleanup_sysv_msgmsg_t)(struct label *msglabel); 1571d82b391SRobert Watson typedef void (*mpo_cleanup_sysv_msgqueue_t)(struct label *msqlabel); 1581d82b391SRobert Watson typedef void (*mpo_cleanup_sysv_sem_t)(struct label *semalabel); 1591d82b391SRobert Watson typedef void (*mpo_cleanup_sysv_shm_t)(struct label *shmlabel); 1601d82b391SRobert Watson typedef void (*mpo_copy_cred_label_t)(struct label *src, 16156d9e932SRobert Watson struct label *dest); 1621d82b391SRobert Watson typedef void (*mpo_copy_ifnet_label_t)(struct label *src, 1632220907bSRobert Watson struct label *dest); 1641d82b391SRobert Watson typedef void (*mpo_copy_mbuf_label_t)(struct label *src, 165225bff6fSRobert Watson struct label *dest); 1661d82b391SRobert Watson typedef void (*mpo_copy_pipe_label_t)(struct label *src, 167475b9d0aSRobert Watson struct label *dest); 1681d82b391SRobert Watson typedef void (*mpo_copy_socket_label_t)(struct label *src, 169b0323ea3SRobert Watson struct label *dest); 1701d82b391SRobert Watson typedef void (*mpo_copy_vnode_label_t)(struct label *src, 171475b9d0aSRobert Watson struct label *dest); 1721d82b391SRobert Watson typedef int (*mpo_externalize_cred_label_t)(struct label *label, 173f51e5803SRobert Watson char *element_name, struct sbuf *sb, int *claimed); 1741d82b391SRobert Watson typedef int (*mpo_externalize_ifnet_label_t)(struct label *label, 175f51e5803SRobert Watson char *element_name, struct sbuf *sb, int *claimed); 1761d82b391SRobert Watson typedef int (*mpo_externalize_pipe_label_t)(struct label *label, 177f51e5803SRobert Watson char *element_name, struct sbuf *sb, int *claimed); 1781d82b391SRobert Watson typedef int (*mpo_externalize_socket_label_t)(struct label *label, 179f51e5803SRobert Watson char *element_name, struct sbuf *sb, int *claimed); 1801d82b391SRobert Watson typedef int (*mpo_externalize_socket_peer_label_t)(struct label *label, 181f51e5803SRobert Watson char *element_name, struct sbuf *sb, int *claimed); 1821d82b391SRobert Watson typedef int (*mpo_externalize_vnode_label_t)(struct label *label, 183f51e5803SRobert Watson char *element_name, struct sbuf *sb, int *claimed); 1841d82b391SRobert Watson typedef int (*mpo_internalize_cred_label_t)(struct label *label, 185475b9d0aSRobert Watson char *element_name, char *element_data, int *claimed); 1861d82b391SRobert Watson typedef int (*mpo_internalize_ifnet_label_t)(struct label *label, 187475b9d0aSRobert Watson char *element_name, char *element_data, int *claimed); 1881d82b391SRobert Watson typedef int (*mpo_internalize_pipe_label_t)(struct label *label, 189475b9d0aSRobert Watson char *element_name, char *element_data, int *claimed); 1901d82b391SRobert Watson typedef int (*mpo_internalize_socket_label_t)(struct label *label, 191475b9d0aSRobert Watson char *element_name, char *element_data, int *claimed); 1921d82b391SRobert Watson typedef int (*mpo_internalize_vnode_label_t)(struct label *label, 193475b9d0aSRobert Watson char *element_name, char *element_data, int *claimed); 194ddcdf265SRobert Watson 195ddcdf265SRobert Watson /* 1966baacecdSRobert Watson * Labeling event operations: file system objects, and things that look a lot 1976baacecdSRobert Watson * like file system objects. 198ddcdf265SRobert Watson */ 1991d82b391SRobert Watson typedef void (*mpo_associate_vnode_devfs_t)(struct mount *mp, 20026ae2b86SRobert Watson struct label *mplabel, struct devfs_dirent *de, 201763bbd2fSRobert Watson struct label *delabel, struct vnode *vp, 20226ae2b86SRobert Watson struct label *vplabel); 2031d82b391SRobert Watson typedef int (*mpo_associate_vnode_extattr_t)(struct mount *mp, 20426ae2b86SRobert Watson struct label *mplabel, struct vnode *vp, 20526ae2b86SRobert Watson struct label *vplabel); 2061d82b391SRobert Watson typedef void (*mpo_associate_vnode_singlelabel_t)(struct mount *mp, 20726ae2b86SRobert Watson struct label *mplabel, struct vnode *vp, 20826ae2b86SRobert Watson struct label *vplabel); 2091d82b391SRobert Watson typedef void (*mpo_create_devfs_device_t)(struct ucred *cred, 210d26dd2d9SRobert Watson struct mount *mp, struct cdev *dev, 21126ae2b86SRobert Watson struct devfs_dirent *de, struct label *delabel); 2121d82b391SRobert Watson typedef void (*mpo_create_devfs_directory_t)(struct mount *mp, 2131d82b391SRobert Watson char *dirname, int dirnamelen, struct devfs_dirent *de, 21426ae2b86SRobert Watson struct label *delabel); 2151d82b391SRobert Watson typedef void (*mpo_create_devfs_symlink_t)(struct ucred *cred, 216990b4b2dSRobert Watson struct mount *mp, struct devfs_dirent *dd, 217990b4b2dSRobert Watson struct label *ddlabel, struct devfs_dirent *de, 218990b4b2dSRobert Watson struct label *delabel); 2191d82b391SRobert Watson typedef int (*mpo_create_vnode_extattr_t)(struct ucred *cred, 22026ae2b86SRobert Watson struct mount *mp, struct label *mplabel, 22126ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 22226ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 223763bbd2fSRobert Watson struct componentname *cnp); 2241d82b391SRobert Watson typedef void (*mpo_create_mount_t)(struct ucred *cred, struct mount *mp, 22526ae2b86SRobert Watson struct label *mplabel); 2261d82b391SRobert Watson typedef void (*mpo_relabel_vnode_t)(struct ucred *cred, struct vnode *vp, 22726ae2b86SRobert Watson struct label *vplabel, struct label *label); 2281d82b391SRobert Watson typedef int (*mpo_setlabel_vnode_extattr_t)(struct ucred *cred, 22926ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 230763bbd2fSRobert Watson struct label *intlabel); 23130575990SRobert Watson typedef void (*mpo_update_devfs_t)(struct mount *mp, 23226ae2b86SRobert Watson struct devfs_dirent *de, struct label *delabel, 23326ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 234ddcdf265SRobert Watson 235ddcdf265SRobert Watson /* 236ddcdf265SRobert Watson * Labeling event operations: IPC objects. 237ddcdf265SRobert Watson */ 2381d82b391SRobert Watson typedef void (*mpo_create_mbuf_from_socket_t)(struct socket *so, 23926ae2b86SRobert Watson struct label *solabel, struct mbuf *m, 24026ae2b86SRobert Watson struct label *mlabel); 2411d82b391SRobert Watson typedef void (*mpo_create_socket_t)(struct ucred *cred, struct socket *so, 24226ae2b86SRobert Watson struct label *solabel); 24326ae2b86SRobert Watson typedef void (*mpo_create_socket_from_socket_t)(struct socket *oldso, 24426ae2b86SRobert Watson struct label *oldsolabel, struct socket *newso, 24526ae2b86SRobert Watson struct label *newsolabel); 2461d82b391SRobert Watson typedef void (*mpo_relabel_socket_t)(struct ucred *cred, struct socket *so, 247ddcdf265SRobert Watson struct label *oldlabel, struct label *newlabel); 2481d82b391SRobert Watson typedef void (*mpo_relabel_pipe_t)(struct ucred *cred, struct pipepair *pp, 249ddcdf265SRobert Watson struct label *oldlabel, struct label *newlabel); 25026ae2b86SRobert Watson typedef void (*mpo_set_socket_peer_from_mbuf_t)(struct mbuf *m, 25126ae2b86SRobert Watson struct label *mlabel, struct socket *so, 25226ae2b86SRobert Watson struct label *sopeerlabel); 25326ae2b86SRobert Watson typedef void (*mpo_set_socket_peer_from_socket_t)(struct socket *oldso, 25426ae2b86SRobert Watson struct label *oldsolabel, struct socket *newso, 25526ae2b86SRobert Watson struct label *newsopeerlabel); 2561d82b391SRobert Watson typedef void (*mpo_create_pipe_t)(struct ucred *cred, struct pipepair *pp, 25726ae2b86SRobert Watson struct label *pplabel); 258ddcdf265SRobert Watson 259ddcdf265SRobert Watson /* 26042726d8aSRobert Watson * Labeling event operations: System V IPC primitives. 26142726d8aSRobert Watson */ 2621d82b391SRobert Watson typedef void (*mpo_create_sysv_msgmsg_t)(struct ucred *cred, 26342726d8aSRobert Watson struct msqid_kernel *msqkptr, struct label *msqlabel, 26442726d8aSRobert Watson struct msg *msgptr, struct label *msglabel); 2651d82b391SRobert Watson typedef void (*mpo_create_sysv_msgqueue_t)(struct ucred *cred, 26642726d8aSRobert Watson struct msqid_kernel *msqkptr, struct label *msqlabel); 2671d82b391SRobert Watson typedef void (*mpo_create_sysv_sem_t)(struct ucred *cred, 26842726d8aSRobert Watson struct semid_kernel *semakptr, struct label *semalabel); 2691d82b391SRobert Watson typedef void (*mpo_create_sysv_shm_t)(struct ucred *cred, 27042726d8aSRobert Watson struct shmid_kernel *shmsegptr, struct label *shmlabel); 27142726d8aSRobert Watson 27242726d8aSRobert Watson /* 27352648411SRobert Watson * Labeling event operations: POSIX (global/inter-process) semaphores. 27452648411SRobert Watson */ 2751d82b391SRobert Watson typedef void (*mpo_create_posix_sem_t)(struct ucred *cred, 27652648411SRobert Watson struct ksem *ksemptr, struct label *ks_label); 27752648411SRobert Watson 27852648411SRobert Watson /* 279ddcdf265SRobert Watson * Labeling event operations: network objects. 280ddcdf265SRobert Watson */ 2811d82b391SRobert Watson typedef void (*mpo_create_bpfdesc_t)(struct ucred *cred, 28226ae2b86SRobert Watson struct bpf_d *d, struct label *dlabel); 28326ae2b86SRobert Watson typedef void (*mpo_create_ifnet_t)(struct ifnet *ifp, 28426ae2b86SRobert Watson struct label *ifplabel); 2851d82b391SRobert Watson typedef void (*mpo_create_inpcb_from_socket_t)(struct socket *so, 286a557af22SRobert Watson struct label *solabel, struct inpcb *inp, 287a557af22SRobert Watson struct label *inplabel); 28826ae2b86SRobert Watson typedef void (*mpo_create_ipq_t)(struct mbuf *m, struct label *mlabel, 28926ae2b86SRobert Watson struct ipq *ipq, struct label *ipqlabel); 2901d82b391SRobert Watson typedef void (*mpo_create_datagram_from_ipq) 29126ae2b86SRobert Watson (struct ipq *ipq, struct label *ipqlabel, struct mbuf *m, 29226ae2b86SRobert Watson struct label *mlabel); 29326ae2b86SRobert Watson typedef void (*mpo_create_fragment_t)(struct mbuf *m, 29426ae2b86SRobert Watson struct label *mlabel, struct mbuf *frag, 29526ae2b86SRobert Watson struct label *fraglabel); 2961d82b391SRobert Watson typedef void (*mpo_create_mbuf_from_inpcb_t)(struct inpcb *inp, 2972d92ec98SRobert Watson struct label *inplabel, struct mbuf *m, 2982d92ec98SRobert Watson struct label *mlabel); 29926ae2b86SRobert Watson typedef void (*mpo_create_mbuf_linklayer_t)(struct ifnet *ifp, 30026ae2b86SRobert Watson struct label *ifplabel, struct mbuf *m, 30126ae2b86SRobert Watson struct label *mlabel); 30226ae2b86SRobert Watson typedef void (*mpo_create_mbuf_from_bpfdesc_t)(struct bpf_d *d, 30326ae2b86SRobert Watson struct label *dlabel, struct mbuf *m, 30426ae2b86SRobert Watson struct label *mlabel); 30526ae2b86SRobert Watson typedef void (*mpo_create_mbuf_from_ifnet_t)(struct ifnet *ifp, 30626ae2b86SRobert Watson struct label *ifplabel, struct mbuf *m, 30726ae2b86SRobert Watson struct label *mlabel); 30826ae2b86SRobert Watson typedef void (*mpo_create_mbuf_multicast_encap_t)(struct mbuf *m, 30926ae2b86SRobert Watson struct label *mlabel, struct ifnet *ifp, 31026ae2b86SRobert Watson struct label *ifplabel, struct mbuf *mnew, 31126ae2b86SRobert Watson struct label *mnewlabel); 31226ae2b86SRobert Watson typedef void (*mpo_create_mbuf_netlayer_t)(struct mbuf *m, 31326ae2b86SRobert Watson struct label *mlabel, struct mbuf *mnew, 31426ae2b86SRobert Watson struct label *mnewlabel); 31526ae2b86SRobert Watson typedef int (*mpo_fragment_match_t)(struct mbuf *m, struct label *mlabel, 31626ae2b86SRobert Watson struct ipq *ipq, struct label *ipqlabel); 3171d82b391SRobert Watson typedef void (*mpo_reflect_mbuf_icmp_t)(struct mbuf *m, 318eb8c7f99SRobert Watson struct label *mlabel); 3191d82b391SRobert Watson typedef void (*mpo_reflect_mbuf_tcp_t)(struct mbuf *m, 3201d82b391SRobert Watson struct label *mlabel); 32126ae2b86SRobert Watson typedef void (*mpo_relabel_ifnet_t)(struct ucred *cred, struct ifnet *ifp, 32226ae2b86SRobert Watson struct label *ifplabel, struct label *newlabel); 32326ae2b86SRobert Watson typedef void (*mpo_update_ipq_t)(struct mbuf *m, struct label *mlabel, 32426ae2b86SRobert Watson struct ipq *ipq, struct label *ipqlabel); 3251d82b391SRobert Watson typedef void (*mpo_inpcb_sosetlabel_t)(struct socket *so, 326a557af22SRobert Watson struct label *label, struct inpcb *inp, 327a557af22SRobert Watson struct label *inplabel); 328ddcdf265SRobert Watson 329d94f2a68SChristian S.J. Peron typedef void (*mpo_create_mbuf_from_firewall_t)(struct mbuf *m, 330d94f2a68SChristian S.J. Peron struct label *label); 331826cef3dSChristian S.J. Peron typedef void (*mpo_destroy_syncache_label_t)(struct label *label); 332826cef3dSChristian S.J. Peron typedef int (*mpo_init_syncache_label_t)(struct label *label, int flag); 333826cef3dSChristian S.J. Peron typedef void (*mpo_init_syncache_from_inpcb_t)(struct label *label, 334826cef3dSChristian S.J. Peron struct inpcb *inp); 335826cef3dSChristian S.J. Peron typedef void (*mpo_create_mbuf_from_syncache_t)(struct label *sc_label, 33626ae2b86SRobert Watson struct mbuf *m, struct label *mlabel); 337ddcdf265SRobert Watson /* 338ddcdf265SRobert Watson * Labeling event operations: processes. 339ddcdf265SRobert Watson */ 3401d82b391SRobert Watson typedef void (*mpo_execve_transition_t)(struct ucred *old, 3411d82b391SRobert Watson struct ucred *new, struct vnode *vp, 34226ae2b86SRobert Watson struct label *vplabel, struct label *interpvnodelabel, 3431d82b391SRobert Watson struct image_params *imgp, struct label *execlabel); 3441d82b391SRobert Watson typedef int (*mpo_execve_will_transition_t)(struct ucred *old, 34526ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 346670cb89bSRobert Watson struct label *interpvnodelabel, 3479fa3506eSRobert Watson struct image_params *imgp, struct label *execlabel); 3481d82b391SRobert Watson typedef void (*mpo_create_proc0_t)(struct ucred *cred); 3491d82b391SRobert Watson typedef void (*mpo_create_proc1_t)(struct ucred *cred); 3501d82b391SRobert Watson typedef void (*mpo_relabel_cred_t)(struct ucred *cred, 351ddcdf265SRobert Watson struct label *newlabel); 3521d82b391SRobert Watson typedef void (*mpo_thread_userret_t)(struct thread *thread); 353ddcdf265SRobert Watson 354ddcdf265SRobert Watson /* 355ddcdf265SRobert Watson * Access control checks. 356ddcdf265SRobert Watson */ 35726ae2b86SRobert Watson typedef int (*mpo_check_bpfdesc_receive_t)(struct bpf_d *d, 35826ae2b86SRobert Watson struct label *dlabel, struct ifnet *ifp, 35926ae2b86SRobert Watson struct label *ifplabel); 3601d82b391SRobert Watson typedef int (*mpo_check_cred_relabel_t)(struct ucred *cred, 361ddcdf265SRobert Watson struct label *newlabel); 36226ae2b86SRobert Watson typedef int (*mpo_check_cred_visible_t)(struct ucred *cr1, 36326ae2b86SRobert Watson struct ucred *cr2); 3641d82b391SRobert Watson typedef int (*mpo_check_ifnet_relabel_t)(struct ucred *cred, 36526ae2b86SRobert Watson struct ifnet *ifp, struct label *ifplabel, 366ddcdf265SRobert Watson struct label *newlabel); 36726ae2b86SRobert Watson typedef int (*mpo_check_ifnet_transmit_t)(struct ifnet *ifp, 36826ae2b86SRobert Watson struct label *ifplabel, struct mbuf *m, 36926ae2b86SRobert Watson struct label *mlabel); 3701d82b391SRobert Watson typedef int (*mpo_check_inpcb_deliver_t)(struct inpcb *inp, 371a557af22SRobert Watson struct label *inplabel, struct mbuf *m, 372a557af22SRobert Watson struct label *mlabel); 3731d82b391SRobert Watson typedef int (*mpo_check_sysv_msgmsq_t)(struct ucred *cred, 37442726d8aSRobert Watson struct msg *msgptr, struct label *msglabel, 37542726d8aSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel); 3761d82b391SRobert Watson typedef int (*mpo_check_sysv_msgrcv_t)(struct ucred *cred, 37742726d8aSRobert Watson struct msg *msgptr, struct label *msglabel); 3781d82b391SRobert Watson typedef int (*mpo_check_sysv_msgrmid_t)(struct ucred *cred, 37942726d8aSRobert Watson struct msg *msgptr, struct label *msglabel); 3801d82b391SRobert Watson typedef int (*mpo_check_sysv_msqget_t)(struct ucred *cred, 38142726d8aSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel); 3821d82b391SRobert Watson typedef int (*mpo_check_sysv_msqsnd_t)(struct ucred *cred, 38342726d8aSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel); 3841d82b391SRobert Watson typedef int (*mpo_check_sysv_msqrcv_t)(struct ucred *cred, 38542726d8aSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel); 3861d82b391SRobert Watson typedef int (*mpo_check_sysv_msqctl_t)(struct ucred *cred, 38742726d8aSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel, 38842726d8aSRobert Watson int cmd); 3891d82b391SRobert Watson typedef int (*mpo_check_sysv_semctl_t)(struct ucred *cred, 39042726d8aSRobert Watson struct semid_kernel *semakptr, struct label *semaklabel, 39142726d8aSRobert Watson int cmd); 3921d82b391SRobert Watson typedef int (*mpo_check_sysv_semget_t)(struct ucred *cred, 39342726d8aSRobert Watson struct semid_kernel *semakptr, struct label *semaklabel); 3941d82b391SRobert Watson typedef int (*mpo_check_sysv_semop_t)(struct ucred *cred, 39542726d8aSRobert Watson struct semid_kernel *semakptr, struct label *semaklabel, 39642726d8aSRobert Watson size_t accesstype); 3971d82b391SRobert Watson typedef int (*mpo_check_sysv_shmat_t)(struct ucred *cred, 39842726d8aSRobert Watson struct shmid_kernel *shmsegptr, 39942726d8aSRobert Watson struct label *shmseglabel, int shmflg); 4001d82b391SRobert Watson typedef int (*mpo_check_sysv_shmctl_t)(struct ucred *cred, 40142726d8aSRobert Watson struct shmid_kernel *shmsegptr, 40242726d8aSRobert Watson struct label *shmseglabel, int cmd); 4031d82b391SRobert Watson typedef int (*mpo_check_sysv_shmdt_t)(struct ucred *cred, 40442726d8aSRobert Watson struct shmid_kernel *shmsegptr, 40542726d8aSRobert Watson struct label *shmseglabel); 4061d82b391SRobert Watson typedef int (*mpo_check_sysv_shmget_t)(struct ucred *cred, 40742726d8aSRobert Watson struct shmid_kernel *shmsegptr, 40842726d8aSRobert Watson struct label *shmseglabel, int shmflg); 4091d82b391SRobert Watson typedef int (*mpo_check_kenv_dump_t)(struct ucred *cred); 4101d82b391SRobert Watson typedef int (*mpo_check_kenv_get_t)(struct ucred *cred, char *name); 4111d82b391SRobert Watson typedef int (*mpo_check_kenv_set_t)(struct ucred *cred, char *name, 412e686e5aeSRobert Watson char *value); 4131d82b391SRobert Watson typedef int (*mpo_check_kenv_unset_t)(struct ucred *cred, char *name); 4141d82b391SRobert Watson typedef int (*mpo_check_kld_load_t)(struct ucred *cred, struct vnode *vp, 41526ae2b86SRobert Watson struct label *vplabel); 4161d82b391SRobert Watson typedef int (*mpo_check_kld_stat_t)(struct ucred *cred); 4171d82b391SRobert Watson typedef int (*mpo_mpo_placeholder19_t)(void); 4181d82b391SRobert Watson typedef int (*mpo_mpo_placeholder20_t)(void); 4191d82b391SRobert Watson typedef int (*mpo_check_mount_stat_t)(struct ucred *cred, 42026ae2b86SRobert Watson struct mount *mp, struct label *mplabel); 4211d82b391SRobert Watson typedef int (*mpo_mpo_placeholder21_t)(void); 4221d82b391SRobert Watson typedef int (*mpo_check_pipe_ioctl_t)(struct ucred *cred, 42326ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel, 4244795b82cSRobert Watson unsigned long cmd, void *data); 4251d82b391SRobert Watson typedef int (*mpo_check_pipe_poll_t)(struct ucred *cred, 42626ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel); 4271d82b391SRobert Watson typedef int (*mpo_check_pipe_read_t)(struct ucred *cred, 42826ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel); 4291d82b391SRobert Watson typedef int (*mpo_check_pipe_relabel_t)(struct ucred *cred, 43026ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel, 431ddcdf265SRobert Watson struct label *newlabel); 4321d82b391SRobert Watson typedef int (*mpo_check_pipe_stat_t)(struct ucred *cred, 43326ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel); 4341d82b391SRobert Watson typedef int (*mpo_check_pipe_write_t)(struct ucred *cred, 43526ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel); 4361d82b391SRobert Watson typedef int (*mpo_check_posix_sem_destroy_t)(struct ucred *cred, 43752648411SRobert Watson struct ksem *ksemptr, struct label *ks_label); 4381d82b391SRobert Watson typedef int (*mpo_check_posix_sem_getvalue_t)(struct ucred *cred, 43952648411SRobert Watson struct ksem *ksemptr, struct label *ks_label); 4401d82b391SRobert Watson typedef int (*mpo_check_posix_sem_open_t)(struct ucred *cred, 44152648411SRobert Watson struct ksem *ksemptr, struct label *ks_label); 4421d82b391SRobert Watson typedef int (*mpo_check_posix_sem_post_t)(struct ucred *cred, 44352648411SRobert Watson struct ksem *ksemptr, struct label *ks_label); 4441d82b391SRobert Watson typedef int (*mpo_check_posix_sem_unlink_t)(struct ucred *cred, 44552648411SRobert Watson struct ksem *ksemptr, struct label *ks_label); 4461d82b391SRobert Watson typedef int (*mpo_check_posix_sem_wait_t)(struct ucred *cred, 44752648411SRobert Watson struct ksem *ksemptr, struct label *ks_label); 4481d82b391SRobert Watson typedef int (*mpo_check_proc_debug_t)(struct ucred *cred, 44926ae2b86SRobert Watson struct proc *p); 4501d82b391SRobert Watson typedef int (*mpo_check_proc_sched_t)(struct ucred *cred, 45126ae2b86SRobert Watson struct proc *p); 45218717f69SRobert Watson typedef int (*mpo_check_proc_setaudit_t)(struct ucred *cred, 45318717f69SRobert Watson struct auditinfo *ai); 454f1e8bf6dSRobert Watson typedef int (*mpo_check_proc_setaudit_addr_t)(struct ucred *cred, 455f1e8bf6dSRobert Watson struct auditinfo_addr *aia); 45618717f69SRobert Watson typedef int (*mpo_check_proc_setauid_t)(struct ucred *cred, uid_t auid); 4571d82b391SRobert Watson typedef int (*mpo_check_proc_setuid_t)(struct ucred *cred, uid_t uid); 4581d82b391SRobert Watson typedef int (*mpo_check_proc_seteuid_t)(struct ucred *cred, uid_t euid); 4591d82b391SRobert Watson typedef int (*mpo_check_proc_setgid_t)(struct ucred *cred, gid_t gid); 4601d82b391SRobert Watson typedef int (*mpo_check_proc_setegid_t)(struct ucred *cred, gid_t egid); 4611d82b391SRobert Watson typedef int (*mpo_check_proc_setgroups_t)(struct ucred *cred, int ngroups, 462030a28b3SRobert Watson gid_t *gidset); 4631d82b391SRobert Watson typedef int (*mpo_check_proc_setreuid_t)(struct ucred *cred, uid_t ruid, 464030a28b3SRobert Watson uid_t euid); 4651d82b391SRobert Watson typedef int (*mpo_check_proc_setregid_t)(struct ucred *cred, gid_t rgid, 466030a28b3SRobert Watson gid_t egid); 4671d82b391SRobert Watson typedef int (*mpo_check_proc_setresuid_t)(struct ucred *cred, uid_t ruid, 468030a28b3SRobert Watson uid_t euid, uid_t suid); 4691d82b391SRobert Watson typedef int (*mpo_check_proc_setresgid_t)(struct ucred *cred, gid_t rgid, 470030a28b3SRobert Watson gid_t egid, gid_t sgid); 4711d82b391SRobert Watson typedef int (*mpo_check_proc_signal_t)(struct ucred *cred, 472ddcdf265SRobert Watson struct proc *proc, int signum); 4731d82b391SRobert Watson typedef int (*mpo_check_proc_wait_t)(struct ucred *cred, 474babe9a2bSRobert Watson struct proc *proc); 4751d82b391SRobert Watson typedef int (*mpo_check_socket_accept_t)(struct ucred *cred, 47626ae2b86SRobert Watson struct socket *so, struct label *solabel); 4771d82b391SRobert Watson typedef int (*mpo_check_socket_bind_t)(struct ucred *cred, 47826ae2b86SRobert Watson struct socket *so, struct label *solabel, 47926ae2b86SRobert Watson struct sockaddr *sa); 4801d82b391SRobert Watson typedef int (*mpo_check_socket_connect_t)(struct ucred *cred, 48126ae2b86SRobert Watson struct socket *so, struct label *solabel, 48226ae2b86SRobert Watson struct sockaddr *sa); 4831d82b391SRobert Watson typedef int (*mpo_check_socket_create_t)(struct ucred *cred, int domain, 4846758f88eSRobert Watson int type, int protocol); 4851d82b391SRobert Watson typedef int (*mpo_check_socket_deliver_t)(struct socket *so, 48626ae2b86SRobert Watson struct label *solabel, struct mbuf *m, 48726ae2b86SRobert Watson struct label *mlabel); 4881d82b391SRobert Watson typedef int (*mpo_check_socket_listen_t)(struct ucred *cred, 48926ae2b86SRobert Watson struct socket *so, struct label *solabel); 4901d82b391SRobert Watson typedef int (*mpo_check_socket_poll_t)(struct ucred *cred, 49126ae2b86SRobert Watson struct socket *so, struct label *solabel); 4921d82b391SRobert Watson typedef int (*mpo_check_socket_receive_t)(struct ucred *cred, 49326ae2b86SRobert Watson struct socket *so, struct label *solabel); 4941d82b391SRobert Watson typedef int (*mpo_check_socket_relabel_t)(struct ucred *cred, 49526ae2b86SRobert Watson struct socket *so, struct label *solabel, 496ddcdf265SRobert Watson struct label *newlabel); 4971d82b391SRobert Watson typedef int (*mpo_check_socket_send_t)(struct ucred *cred, 49826ae2b86SRobert Watson struct socket *so, struct label *solabel); 4991d82b391SRobert Watson typedef int (*mpo_check_socket_stat_t)(struct ucred *cred, 50026ae2b86SRobert Watson struct socket *so, struct label *solabel); 5011d82b391SRobert Watson typedef int (*mpo_check_socket_visible_t)(struct ucred *cred, 50226ae2b86SRobert Watson struct socket *so, struct label *solabel); 5031d82b391SRobert Watson typedef int (*mpo_check_system_acct_t)(struct ucred *cred, 50426ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 50518717f69SRobert Watson typedef int (*mpo_check_system_audit_t)(struct ucred *cred, void *record, 50618717f69SRobert Watson int length); 50718717f69SRobert Watson typedef int (*mpo_check_system_auditctl_t)(struct ucred *cred, 50818717f69SRobert Watson struct vnode *vp, struct label *vplabel); 50918717f69SRobert Watson typedef int (*mpo_check_system_auditon_t)(struct ucred *cred, int cmd); 5101d82b391SRobert Watson typedef int (*mpo_check_system_reboot_t)(struct ucred *cred, int howto); 5111d82b391SRobert Watson typedef int (*mpo_check_system_swapon_t)(struct ucred *cred, 51226ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 5131d82b391SRobert Watson typedef int (*mpo_check_system_swapoff_t)(struct ucred *cred, 51426ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 5151d82b391SRobert Watson typedef int (*mpo_check_system_sysctl_t)(struct ucred *cred, 51663dba32bSPawel Jakub Dawidek struct sysctl_oid *oidp, void *arg1, int arg2, 51763dba32bSPawel Jakub Dawidek struct sysctl_req *req); 5181d82b391SRobert Watson typedef int (*mpo_check_vnode_access_t)(struct ucred *cred, 51926ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, int acc_mode); 5201d82b391SRobert Watson typedef int (*mpo_check_vnode_chdir_t)(struct ucred *cred, 52126ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel); 5221d82b391SRobert Watson typedef int (*mpo_check_vnode_chroot_t)(struct ucred *cred, 52326ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel); 5241d82b391SRobert Watson typedef int (*mpo_check_vnode_create_t)(struct ucred *cred, 52526ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 526ddcdf265SRobert Watson struct componentname *cnp, struct vattr *vap); 5271d82b391SRobert Watson typedef int (*mpo_check_vnode_deleteacl_t)(struct ucred *cred, 52826ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 52926ae2b86SRobert Watson acl_type_t type); 5301d82b391SRobert Watson typedef int (*mpo_check_vnode_deleteextattr_t)(struct ucred *cred, 53126ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 53226ae2b86SRobert Watson int attrnamespace, const char *name); 5331d82b391SRobert Watson typedef int (*mpo_check_vnode_exec_t)(struct ucred *cred, 53426ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 5351d82b391SRobert Watson struct image_params *imgp, struct label *execlabel); 5361d82b391SRobert Watson typedef int (*mpo_check_vnode_getacl_t)(struct ucred *cred, 53726ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 53826ae2b86SRobert Watson acl_type_t type); 5391d82b391SRobert Watson typedef int (*mpo_check_vnode_getextattr_t)(struct ucred *cred, 54026ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 54126ae2b86SRobert Watson int attrnamespace, const char *name, struct uio *uio); 5421d82b391SRobert Watson typedef int (*mpo_check_vnode_link_t)(struct ucred *cred, 54326ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 54426ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 54526ae2b86SRobert Watson struct componentname *cnp); 5461d82b391SRobert Watson typedef int (*mpo_check_vnode_listextattr_t)(struct ucred *cred, 54726ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 5481d82b391SRobert Watson int attrnamespace); 5491d82b391SRobert Watson typedef int (*mpo_check_vnode_lookup_t)(struct ucred *cred, 55026ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 551ddcdf265SRobert Watson struct componentname *cnp); 5521d82b391SRobert Watson typedef int (*mpo_check_vnode_mmap_t)(struct ucred *cred, 5531d82b391SRobert Watson struct vnode *vp, struct label *label, int prot, 5541d82b391SRobert Watson int flags); 5551d82b391SRobert Watson typedef void (*mpo_check_vnode_mmap_downgrade_t)(struct ucred *cred, 55626ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, int *prot); 5571d82b391SRobert Watson typedef int (*mpo_check_vnode_mprotect_t)(struct ucred *cred, 55826ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, int prot); 5591d82b391SRobert Watson typedef int (*mpo_check_vnode_open_t)(struct ucred *cred, 56026ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, int acc_mode); 5611d82b391SRobert Watson typedef int (*mpo_check_vnode_poll_t)(struct ucred *active_cred, 562177142e4SRobert Watson struct ucred *file_cred, struct vnode *vp, 56326ae2b86SRobert Watson struct label *vplabel); 5641d82b391SRobert Watson typedef int (*mpo_check_vnode_read_t)(struct ucred *active_cred, 565177142e4SRobert Watson struct ucred *file_cred, struct vnode *vp, 56626ae2b86SRobert Watson struct label *vplabel); 5671d82b391SRobert Watson typedef int (*mpo_check_vnode_readdir_t)(struct ucred *cred, 56826ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel); 5691d82b391SRobert Watson typedef int (*mpo_check_vnode_readlink_t)(struct ucred *cred, 57026ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 5711d82b391SRobert Watson typedef int (*mpo_check_vnode_relabel_t)(struct ucred *cred, 57226ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 573ddcdf265SRobert Watson struct label *newlabel); 5741d82b391SRobert Watson typedef int (*mpo_check_vnode_rename_from_t)(struct ucred *cred, 57526ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 57626ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 577ddcdf265SRobert Watson struct componentname *cnp); 5781d82b391SRobert Watson typedef int (*mpo_check_vnode_rename_to_t)(struct ucred *cred, 57926ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 58026ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, int samedir, 5811d82b391SRobert Watson struct componentname *cnp); 5821d82b391SRobert Watson typedef int (*mpo_check_vnode_revoke_t)(struct ucred *cred, 58326ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 5841d82b391SRobert Watson typedef int (*mpo_check_vnode_setacl_t)(struct ucred *cred, 58526ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, acl_type_t type, 586ddcdf265SRobert Watson struct acl *acl); 5871d82b391SRobert Watson typedef int (*mpo_check_vnode_setextattr_t)(struct ucred *cred, 58826ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 58926ae2b86SRobert Watson int attrnamespace, const char *name, struct uio *uio); 5901d82b391SRobert Watson typedef int (*mpo_check_vnode_setflags_t)(struct ucred *cred, 59126ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, u_long flags); 5921d82b391SRobert Watson typedef int (*mpo_check_vnode_setmode_t)(struct ucred *cred, 59326ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, mode_t mode); 5941d82b391SRobert Watson typedef int (*mpo_check_vnode_setowner_t)(struct ucred *cred, 59526ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, uid_t uid, 596ddcdf265SRobert Watson gid_t gid); 5971d82b391SRobert Watson typedef int (*mpo_check_vnode_setutimes_t)(struct ucred *cred, 59826ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 599ddcdf265SRobert Watson struct timespec atime, struct timespec mtime); 6001d82b391SRobert Watson typedef int (*mpo_check_vnode_stat_t)(struct ucred *active_cred, 601177142e4SRobert Watson struct ucred *file_cred, struct vnode *vp, 60226ae2b86SRobert Watson struct label *vplabel); 60345e0f3d6SRobert Watson typedef int (*mpo_check_vnode_unlink_t)(struct ucred *cred, 60445e0f3d6SRobert Watson struct vnode *dvp, struct label *dvplabel, 60545e0f3d6SRobert Watson struct vnode *vp, struct label *vplabel, 60645e0f3d6SRobert Watson struct componentname *cnp); 6071d82b391SRobert Watson typedef int (*mpo_check_vnode_write_t)(struct ucred *active_cred, 608177142e4SRobert Watson struct ucred *file_cred, struct vnode *vp, 60926ae2b86SRobert Watson struct label *vplabel); 61014f212e2SRobert Watson typedef void (*mpo_associate_nfsd_label_t)(struct ucred *cred); 611acd3428bSRobert Watson typedef int (*mpo_priv_check_t)(struct ucred *cred, int priv); 612acd3428bSRobert Watson typedef int (*mpo_priv_grant_t)(struct ucred *cred, int priv); 6131d82b391SRobert Watson 6141d82b391SRobert Watson struct mac_policy_ops { 6151d82b391SRobert Watson /* 6161d82b391SRobert Watson * Policy module operations. 6171d82b391SRobert Watson */ 6181d82b391SRobert Watson mpo_destroy_t mpo_destroy; 6191d82b391SRobert Watson mpo_init_t mpo_init; 6201d82b391SRobert Watson 6211d82b391SRobert Watson /* 6221d82b391SRobert Watson * General policy-directed security system call so that policies may 6231d82b391SRobert Watson * implement new services without reserving explicit system call 6241d82b391SRobert Watson * numbers. 6251d82b391SRobert Watson */ 6261d82b391SRobert Watson mpo_syscall_t mpo_syscall; 6271d82b391SRobert Watson 6281d82b391SRobert Watson /* 6291d82b391SRobert Watson * Label operations. Initialize label storage, destroy label 6301d82b391SRobert Watson * storage, recycle for re-use without init/destroy, copy a label to 6311d82b391SRobert Watson * initialized storage, and externalize/internalize from/to 6321d82b391SRobert Watson * initialized storage. 6331d82b391SRobert Watson */ 6341d82b391SRobert Watson mpo_init_bpfdesc_label_t mpo_init_bpfdesc_label; 6351d82b391SRobert Watson mpo_init_cred_label_t mpo_init_cred_label; 63630575990SRobert Watson mpo_init_devfs_label_t mpo_init_devfs_label; 6371d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder0; 6381d82b391SRobert Watson mpo_init_ifnet_label_t mpo_init_ifnet_label; 6391d82b391SRobert Watson mpo_init_inpcb_label_t mpo_init_inpcb_label; 6401d82b391SRobert Watson mpo_init_sysv_msgmsg_label_t mpo_init_sysv_msgmsg_label; 6411d82b391SRobert Watson mpo_init_sysv_msgqueue_label_t mpo_init_sysv_msgqueue_label; 6421d82b391SRobert Watson mpo_init_sysv_sem_label_t mpo_init_sysv_sem_label; 6431d82b391SRobert Watson mpo_init_sysv_shm_label_t mpo_init_sysv_shm_label; 6441d82b391SRobert Watson mpo_init_ipq_label_t mpo_init_ipq_label; 6451d82b391SRobert Watson mpo_init_mbuf_label_t mpo_init_mbuf_label; 6461d82b391SRobert Watson mpo_init_mount_label_t mpo_init_mount_label; 6471d82b391SRobert Watson mpo_init_socket_label_t mpo_init_socket_label; 6481d82b391SRobert Watson mpo_init_socket_peer_label_t mpo_init_socket_peer_label; 6491d82b391SRobert Watson mpo_init_pipe_label_t mpo_init_pipe_label; 6501d82b391SRobert Watson mpo_init_posix_sem_label_t mpo_init_posix_sem_label; 6511d82b391SRobert Watson mpo_init_proc_label_t mpo_init_proc_label; 6521d82b391SRobert Watson mpo_init_vnode_label_t mpo_init_vnode_label; 6531d82b391SRobert Watson mpo_destroy_bpfdesc_label_t mpo_destroy_bpfdesc_label; 6541d82b391SRobert Watson mpo_destroy_cred_label_t mpo_destroy_cred_label; 65530575990SRobert Watson mpo_destroy_devfs_label_t mpo_destroy_devfs_label; 6561d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder1; 6571d82b391SRobert Watson mpo_destroy_ifnet_label_t mpo_destroy_ifnet_label; 6581d82b391SRobert Watson mpo_destroy_inpcb_label_t mpo_destroy_inpcb_label; 6591d82b391SRobert Watson mpo_destroy_sysv_msgmsg_label_t mpo_destroy_sysv_msgmsg_label; 6601d82b391SRobert Watson mpo_destroy_sysv_msgqueue_label_t mpo_destroy_sysv_msgqueue_label; 6611d82b391SRobert Watson mpo_destroy_sysv_sem_label_t mpo_destroy_sysv_sem_label; 6621d82b391SRobert Watson mpo_destroy_sysv_shm_label_t mpo_destroy_sysv_shm_label; 6631d82b391SRobert Watson mpo_destroy_ipq_label_t mpo_destroy_ipq_label; 6641d82b391SRobert Watson mpo_destroy_mbuf_label_t mpo_destroy_mbuf_label; 6651d82b391SRobert Watson mpo_destroy_mount_label_t mpo_destroy_mount_label; 6661d82b391SRobert Watson mpo_destroy_socket_label_t mpo_destroy_socket_label; 6671d82b391SRobert Watson mpo_destroy_socket_peer_label_t mpo_destroy_socket_peer_label; 6681d82b391SRobert Watson mpo_destroy_pipe_label_t mpo_destroy_pipe_label; 6691d82b391SRobert Watson mpo_destroy_posix_sem_label_t mpo_destroy_posix_sem_label; 6701d82b391SRobert Watson mpo_destroy_proc_label_t mpo_destroy_proc_label; 6711d82b391SRobert Watson mpo_destroy_vnode_label_t mpo_destroy_vnode_label; 6721d82b391SRobert Watson mpo_cleanup_sysv_msgmsg_t mpo_cleanup_sysv_msgmsg; 6731d82b391SRobert Watson mpo_cleanup_sysv_msgqueue_t mpo_cleanup_sysv_msgqueue; 6741d82b391SRobert Watson mpo_cleanup_sysv_sem_t mpo_cleanup_sysv_sem; 6751d82b391SRobert Watson mpo_cleanup_sysv_shm_t mpo_cleanup_sysv_shm; 6761d82b391SRobert Watson mpo_copy_cred_label_t mpo_copy_cred_label; 6771d82b391SRobert Watson mpo_copy_ifnet_label_t mpo_copy_ifnet_label; 6781d82b391SRobert Watson mpo_copy_mbuf_label_t mpo_copy_mbuf_label; 6791d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder2; 6801d82b391SRobert Watson mpo_copy_pipe_label_t mpo_copy_pipe_label; 6811d82b391SRobert Watson mpo_copy_socket_label_t mpo_copy_socket_label; 6821d82b391SRobert Watson mpo_copy_vnode_label_t mpo_copy_vnode_label; 6831d82b391SRobert Watson mpo_externalize_cred_label_t mpo_externalize_cred_label; 6841d82b391SRobert Watson mpo_externalize_ifnet_label_t mpo_externalize_ifnet_label; 6851d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder3; 6861d82b391SRobert Watson mpo_externalize_pipe_label_t mpo_externalize_pipe_label; 6871d82b391SRobert Watson mpo_externalize_socket_label_t mpo_externalize_socket_label; 6881d82b391SRobert Watson mpo_externalize_socket_peer_label_t mpo_externalize_socket_peer_label; 6891d82b391SRobert Watson mpo_externalize_vnode_label_t mpo_externalize_vnode_label; 6901d82b391SRobert Watson mpo_internalize_cred_label_t mpo_internalize_cred_label; 6911d82b391SRobert Watson mpo_internalize_ifnet_label_t mpo_internalize_ifnet_label; 6921d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder4; 6931d82b391SRobert Watson mpo_internalize_pipe_label_t mpo_internalize_pipe_label; 6941d82b391SRobert Watson mpo_internalize_socket_label_t mpo_internalize_socket_label; 6951d82b391SRobert Watson mpo_internalize_vnode_label_t mpo_internalize_vnode_label; 6961d82b391SRobert Watson 6971d82b391SRobert Watson /* 6981d82b391SRobert Watson * Labeling event operations: file system objects, and things that 6991d82b391SRobert Watson * look a lot like file system objects. 7001d82b391SRobert Watson */ 7011d82b391SRobert Watson mpo_associate_vnode_devfs_t mpo_associate_vnode_devfs; 7021d82b391SRobert Watson mpo_associate_vnode_extattr_t mpo_associate_vnode_extattr; 7031d82b391SRobert Watson mpo_associate_vnode_singlelabel_t mpo_associate_vnode_singlelabel; 7041d82b391SRobert Watson mpo_create_devfs_device_t mpo_create_devfs_device; 7051d82b391SRobert Watson mpo_create_devfs_directory_t mpo_create_devfs_directory; 7061d82b391SRobert Watson mpo_create_devfs_symlink_t mpo_create_devfs_symlink; 7071d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder5; 7081d82b391SRobert Watson mpo_create_vnode_extattr_t mpo_create_vnode_extattr; 7091d82b391SRobert Watson mpo_create_mount_t mpo_create_mount; 7101d82b391SRobert Watson mpo_relabel_vnode_t mpo_relabel_vnode; 7111d82b391SRobert Watson mpo_setlabel_vnode_extattr_t mpo_setlabel_vnode_extattr; 71230575990SRobert Watson mpo_update_devfs_t mpo_update_devfs; 7131d82b391SRobert Watson 7141d82b391SRobert Watson /* 7151d82b391SRobert Watson * Labeling event operations: IPC objects. 7161d82b391SRobert Watson */ 7171d82b391SRobert Watson mpo_create_mbuf_from_socket_t mpo_create_mbuf_from_socket; 7181d82b391SRobert Watson mpo_create_socket_t mpo_create_socket; 7191d82b391SRobert Watson mpo_create_socket_from_socket_t mpo_create_socket_from_socket; 7201d82b391SRobert Watson mpo_relabel_socket_t mpo_relabel_socket; 7211d82b391SRobert Watson mpo_relabel_pipe_t mpo_relabel_pipe; 7221d82b391SRobert Watson mpo_set_socket_peer_from_mbuf_t mpo_set_socket_peer_from_mbuf; 7231d82b391SRobert Watson mpo_set_socket_peer_from_socket_t mpo_set_socket_peer_from_socket; 7241d82b391SRobert Watson mpo_create_pipe_t mpo_create_pipe; 7251d82b391SRobert Watson 7261d82b391SRobert Watson /* 7271d82b391SRobert Watson * Labeling event operations: System V IPC primitives. 7281d82b391SRobert Watson */ 7291d82b391SRobert Watson mpo_create_sysv_msgmsg_t mpo_create_sysv_msgmsg; 7301d82b391SRobert Watson mpo_create_sysv_msgqueue_t mpo_create_sysv_msgqueue; 7311d82b391SRobert Watson mpo_create_sysv_sem_t mpo_create_sysv_sem; 7321d82b391SRobert Watson mpo_create_sysv_shm_t mpo_create_sysv_shm; 7331d82b391SRobert Watson 7341d82b391SRobert Watson /* 7351d82b391SRobert Watson * Labeling event operations: POSIX (global/inter-process) semaphores. 7361d82b391SRobert Watson */ 7371d82b391SRobert Watson mpo_create_posix_sem_t mpo_create_posix_sem; 7381d82b391SRobert Watson 7391d82b391SRobert Watson /* 7401d82b391SRobert Watson * Labeling event operations: network objects. 7411d82b391SRobert Watson */ 7421d82b391SRobert Watson mpo_create_bpfdesc_t mpo_create_bpfdesc; 7431d82b391SRobert Watson mpo_create_ifnet_t mpo_create_ifnet; 7441d82b391SRobert Watson mpo_create_inpcb_from_socket_t mpo_create_inpcb_from_socket; 7451d82b391SRobert Watson mpo_create_ipq_t mpo_create_ipq; 7461d82b391SRobert Watson mpo_create_datagram_from_ipq mpo_create_datagram_from_ipq; 7471d82b391SRobert Watson mpo_create_fragment_t mpo_create_fragment; 7481d82b391SRobert Watson mpo_create_mbuf_from_inpcb_t mpo_create_mbuf_from_inpcb; 7491d82b391SRobert Watson mpo_create_mbuf_linklayer_t mpo_create_mbuf_linklayer; 7501d82b391SRobert Watson mpo_create_mbuf_from_bpfdesc_t mpo_create_mbuf_from_bpfdesc; 7511d82b391SRobert Watson mpo_create_mbuf_from_ifnet_t mpo_create_mbuf_from_ifnet; 7521d82b391SRobert Watson mpo_create_mbuf_multicast_encap_t mpo_create_mbuf_multicast_encap; 7531d82b391SRobert Watson mpo_create_mbuf_netlayer_t mpo_create_mbuf_netlayer; 7541d82b391SRobert Watson mpo_fragment_match_t mpo_fragment_match; 7551d82b391SRobert Watson mpo_reflect_mbuf_icmp_t mpo_reflect_mbuf_icmp; 7561d82b391SRobert Watson mpo_reflect_mbuf_tcp_t mpo_reflect_mbuf_tcp; 7571d82b391SRobert Watson mpo_relabel_ifnet_t mpo_relabel_ifnet; 7581d82b391SRobert Watson mpo_update_ipq_t mpo_update_ipq; 7591d82b391SRobert Watson mpo_inpcb_sosetlabel_t mpo_inpcb_sosetlabel; 7601d82b391SRobert Watson 7611d82b391SRobert Watson /* 7621d82b391SRobert Watson * Labeling event operations: processes. 7631d82b391SRobert Watson */ 7641d82b391SRobert Watson mpo_execve_transition_t mpo_execve_transition; 7651d82b391SRobert Watson mpo_execve_will_transition_t mpo_execve_will_transition; 7661d82b391SRobert Watson mpo_create_proc0_t mpo_create_proc0; 7671d82b391SRobert Watson mpo_create_proc1_t mpo_create_proc1; 7681d82b391SRobert Watson mpo_relabel_cred_t mpo_relabel_cred; 7691d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder6; 7701d82b391SRobert Watson mpo_thread_userret_t mpo_thread_userret; 7711d82b391SRobert Watson 7721d82b391SRobert Watson /* 7731d82b391SRobert Watson * Access control checks. 7741d82b391SRobert Watson */ 7751d82b391SRobert Watson mpo_check_bpfdesc_receive_t mpo_check_bpfdesc_receive; 7761d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder7; 7771d82b391SRobert Watson mpo_check_cred_relabel_t mpo_check_cred_relabel; 7781d82b391SRobert Watson mpo_check_cred_visible_t mpo_check_cred_visible; 7791d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder8; 7801d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder9; 7811d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder10; 7821d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder11; 7831d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder12; 7841d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder13; 7851d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder14; 7861d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder15; 7871d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder16; 7881d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder17; 7891d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder18; 7901d82b391SRobert Watson mpo_check_ifnet_relabel_t mpo_check_ifnet_relabel; 7911d82b391SRobert Watson mpo_check_ifnet_transmit_t mpo_check_ifnet_transmit; 7921d82b391SRobert Watson mpo_check_inpcb_deliver_t mpo_check_inpcb_deliver; 7931d82b391SRobert Watson mpo_check_sysv_msgmsq_t mpo_check_sysv_msgmsq; 7941d82b391SRobert Watson mpo_check_sysv_msgrcv_t mpo_check_sysv_msgrcv; 7951d82b391SRobert Watson mpo_check_sysv_msgrmid_t mpo_check_sysv_msgrmid; 7961d82b391SRobert Watson mpo_check_sysv_msqget_t mpo_check_sysv_msqget; 7971d82b391SRobert Watson mpo_check_sysv_msqsnd_t mpo_check_sysv_msqsnd; 7981d82b391SRobert Watson mpo_check_sysv_msqrcv_t mpo_check_sysv_msqrcv; 7991d82b391SRobert Watson mpo_check_sysv_msqctl_t mpo_check_sysv_msqctl; 8001d82b391SRobert Watson mpo_check_sysv_semctl_t mpo_check_sysv_semctl; 8011d82b391SRobert Watson mpo_check_sysv_semget_t mpo_check_sysv_semget; 8021d82b391SRobert Watson mpo_check_sysv_semop_t mpo_check_sysv_semop; 8031d82b391SRobert Watson mpo_check_sysv_shmat_t mpo_check_sysv_shmat; 8041d82b391SRobert Watson mpo_check_sysv_shmctl_t mpo_check_sysv_shmctl; 8051d82b391SRobert Watson mpo_check_sysv_shmdt_t mpo_check_sysv_shmdt; 8061d82b391SRobert Watson mpo_check_sysv_shmget_t mpo_check_sysv_shmget; 8071d82b391SRobert Watson mpo_check_kenv_dump_t mpo_check_kenv_dump; 8081d82b391SRobert Watson mpo_check_kenv_get_t mpo_check_kenv_get; 8091d82b391SRobert Watson mpo_check_kenv_set_t mpo_check_kenv_set; 8101d82b391SRobert Watson mpo_check_kenv_unset_t mpo_check_kenv_unset; 8111d82b391SRobert Watson mpo_check_kld_load_t mpo_check_kld_load; 8121d82b391SRobert Watson mpo_check_kld_stat_t mpo_check_kld_stat; 8131d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder19; 8141d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder20; 8151d82b391SRobert Watson mpo_check_mount_stat_t mpo_check_mount_stat; 8161d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder_21; 8171d82b391SRobert Watson mpo_check_pipe_ioctl_t mpo_check_pipe_ioctl; 8181d82b391SRobert Watson mpo_check_pipe_poll_t mpo_check_pipe_poll; 8191d82b391SRobert Watson mpo_check_pipe_read_t mpo_check_pipe_read; 8201d82b391SRobert Watson mpo_check_pipe_relabel_t mpo_check_pipe_relabel; 8211d82b391SRobert Watson mpo_check_pipe_stat_t mpo_check_pipe_stat; 8221d82b391SRobert Watson mpo_check_pipe_write_t mpo_check_pipe_write; 8231d82b391SRobert Watson mpo_check_posix_sem_destroy_t mpo_check_posix_sem_destroy; 8241d82b391SRobert Watson mpo_check_posix_sem_getvalue_t mpo_check_posix_sem_getvalue; 8251d82b391SRobert Watson mpo_check_posix_sem_open_t mpo_check_posix_sem_open; 8261d82b391SRobert Watson mpo_check_posix_sem_post_t mpo_check_posix_sem_post; 8271d82b391SRobert Watson mpo_check_posix_sem_unlink_t mpo_check_posix_sem_unlink; 8281d82b391SRobert Watson mpo_check_posix_sem_wait_t mpo_check_posix_sem_wait; 8291d82b391SRobert Watson mpo_check_proc_debug_t mpo_check_proc_debug; 8301d82b391SRobert Watson mpo_check_proc_sched_t mpo_check_proc_sched; 83118717f69SRobert Watson mpo_check_proc_setaudit_t mpo_check_proc_setaudit; 832f1e8bf6dSRobert Watson mpo_check_proc_setaudit_addr_t mpo_check_proc_setaudit_addr; 83318717f69SRobert Watson mpo_check_proc_setauid_t mpo_check_proc_setauid; 8341d82b391SRobert Watson mpo_check_proc_setuid_t mpo_check_proc_setuid; 8351d82b391SRobert Watson mpo_check_proc_seteuid_t mpo_check_proc_seteuid; 8361d82b391SRobert Watson mpo_check_proc_setgid_t mpo_check_proc_setgid; 8371d82b391SRobert Watson mpo_check_proc_setegid_t mpo_check_proc_setegid; 8381d82b391SRobert Watson mpo_check_proc_setgroups_t mpo_check_proc_setgroups; 8391d82b391SRobert Watson mpo_check_proc_setreuid_t mpo_check_proc_setreuid; 8401d82b391SRobert Watson mpo_check_proc_setregid_t mpo_check_proc_setregid; 8411d82b391SRobert Watson mpo_check_proc_setresuid_t mpo_check_proc_setresuid; 8421d82b391SRobert Watson mpo_check_proc_setresgid_t mpo_check_proc_setresgid; 8431d82b391SRobert Watson mpo_check_proc_signal_t mpo_check_proc_signal; 8441d82b391SRobert Watson mpo_check_proc_wait_t mpo_check_proc_wait; 8451d82b391SRobert Watson mpo_check_socket_accept_t mpo_check_socket_accept; 8461d82b391SRobert Watson mpo_check_socket_bind_t mpo_check_socket_bind; 8471d82b391SRobert Watson mpo_check_socket_connect_t mpo_check_socket_connect; 8481d82b391SRobert Watson mpo_check_socket_create_t mpo_check_socket_create; 8491d82b391SRobert Watson mpo_check_socket_deliver_t mpo_check_socket_deliver; 8501d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder22; 8511d82b391SRobert Watson mpo_check_socket_listen_t mpo_check_socket_listen; 8521d82b391SRobert Watson mpo_check_socket_poll_t mpo_check_socket_poll; 8531d82b391SRobert Watson mpo_check_socket_receive_t mpo_check_socket_receive; 8541d82b391SRobert Watson mpo_check_socket_relabel_t mpo_check_socket_relabel; 8551d82b391SRobert Watson mpo_check_socket_send_t mpo_check_socket_send; 8561d82b391SRobert Watson mpo_check_socket_stat_t mpo_check_socket_stat; 8571d82b391SRobert Watson mpo_check_socket_visible_t mpo_check_socket_visible; 8581d82b391SRobert Watson mpo_check_system_acct_t mpo_check_system_acct; 85918717f69SRobert Watson mpo_check_system_audit_t mpo_check_system_audit; 86018717f69SRobert Watson mpo_check_system_auditctl_t mpo_check_system_auditctl; 86118717f69SRobert Watson mpo_check_system_auditon_t mpo_check_system_auditon; 8621d82b391SRobert Watson mpo_check_system_reboot_t mpo_check_system_reboot; 8631d82b391SRobert Watson mpo_check_system_swapon_t mpo_check_system_swapon; 8641d82b391SRobert Watson mpo_check_system_swapoff_t mpo_check_system_swapoff; 8651d82b391SRobert Watson mpo_check_system_sysctl_t mpo_check_system_sysctl; 8661d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder23; 8671d82b391SRobert Watson mpo_check_vnode_access_t mpo_check_vnode_access; 8681d82b391SRobert Watson mpo_check_vnode_chdir_t mpo_check_vnode_chdir; 8691d82b391SRobert Watson mpo_check_vnode_chroot_t mpo_check_vnode_chroot; 8701d82b391SRobert Watson mpo_check_vnode_create_t mpo_check_vnode_create; 8711d82b391SRobert Watson mpo_check_vnode_deleteacl_t mpo_check_vnode_deleteacl; 8721d82b391SRobert Watson mpo_check_vnode_deleteextattr_t mpo_check_vnode_deleteextattr; 8731d82b391SRobert Watson mpo_check_vnode_exec_t mpo_check_vnode_exec; 8741d82b391SRobert Watson mpo_check_vnode_getacl_t mpo_check_vnode_getacl; 8751d82b391SRobert Watson mpo_check_vnode_getextattr_t mpo_check_vnode_getextattr; 8761d82b391SRobert Watson mpo_placeholder_t _mpo_placeholder24; 8771d82b391SRobert Watson mpo_check_vnode_link_t mpo_check_vnode_link; 8781d82b391SRobert Watson mpo_check_vnode_listextattr_t mpo_check_vnode_listextattr; 8791d82b391SRobert Watson mpo_check_vnode_lookup_t mpo_check_vnode_lookup; 8801d82b391SRobert Watson mpo_check_vnode_mmap_t mpo_check_vnode_mmap; 8811d82b391SRobert Watson mpo_check_vnode_mmap_downgrade_t mpo_check_vnode_mmap_downgrade; 8821d82b391SRobert Watson mpo_check_vnode_mprotect_t mpo_check_vnode_mprotect; 8831d82b391SRobert Watson mpo_check_vnode_open_t mpo_check_vnode_open; 8841d82b391SRobert Watson mpo_check_vnode_poll_t mpo_check_vnode_poll; 8851d82b391SRobert Watson mpo_check_vnode_read_t mpo_check_vnode_read; 8861d82b391SRobert Watson mpo_check_vnode_readdir_t mpo_check_vnode_readdir; 8871d82b391SRobert Watson mpo_check_vnode_readlink_t mpo_check_vnode_readlink; 8881d82b391SRobert Watson mpo_check_vnode_relabel_t mpo_check_vnode_relabel; 8891d82b391SRobert Watson mpo_check_vnode_rename_from_t mpo_check_vnode_rename_from; 8901d82b391SRobert Watson mpo_check_vnode_rename_to_t mpo_check_vnode_rename_to; 8911d82b391SRobert Watson mpo_check_vnode_revoke_t mpo_check_vnode_revoke; 8921d82b391SRobert Watson mpo_check_vnode_setacl_t mpo_check_vnode_setacl; 8931d82b391SRobert Watson mpo_check_vnode_setextattr_t mpo_check_vnode_setextattr; 8941d82b391SRobert Watson mpo_check_vnode_setflags_t mpo_check_vnode_setflags; 8951d82b391SRobert Watson mpo_check_vnode_setmode_t mpo_check_vnode_setmode; 8961d82b391SRobert Watson mpo_check_vnode_setowner_t mpo_check_vnode_setowner; 8971d82b391SRobert Watson mpo_check_vnode_setutimes_t mpo_check_vnode_setutimes; 8981d82b391SRobert Watson mpo_check_vnode_stat_t mpo_check_vnode_stat; 89945e0f3d6SRobert Watson mpo_check_vnode_unlink_t mpo_check_vnode_unlink; 9001d82b391SRobert Watson mpo_check_vnode_write_t mpo_check_vnode_write; 9011d82b391SRobert Watson mpo_associate_nfsd_label_t mpo_associate_nfsd_label; 902d94f2a68SChristian S.J. Peron mpo_create_mbuf_from_firewall_t mpo_create_mbuf_from_firewall; 903826cef3dSChristian S.J. Peron mpo_init_syncache_label_t mpo_init_syncache_label; 904826cef3dSChristian S.J. Peron mpo_destroy_syncache_label_t mpo_destroy_syncache_label; 905826cef3dSChristian S.J. Peron mpo_init_syncache_from_inpcb_t mpo_init_syncache_from_inpcb; 906826cef3dSChristian S.J. Peron mpo_create_mbuf_from_syncache_t mpo_create_mbuf_from_syncache; 907acd3428bSRobert Watson mpo_priv_check_t mpo_priv_check; 908acd3428bSRobert Watson mpo_priv_grant_t mpo_priv_grant; 909ddcdf265SRobert Watson }; 910ddcdf265SRobert Watson 9113459e1d2SRobert Watson /* 9123459e1d2SRobert Watson * struct mac_policy_conf is the registration structure for policies, and is 9133459e1d2SRobert Watson * provided to the MAC Framework using MAC_POLICY_SET() to invoke a SYSINIT 9143459e1d2SRobert Watson * to register the policy. In general, the fields are immutable, with the 9153459e1d2SRobert Watson * exception of the "security field", run-time flags, and policy list entry, 9163459e1d2SRobert Watson * which are managed by the MAC Framework. Be careful when modifying this 9173459e1d2SRobert Watson * structure, as its layout is statically compiled into all policies. 9183459e1d2SRobert Watson */ 919ddcdf265SRobert Watson struct mac_policy_conf { 920ddcdf265SRobert Watson char *mpc_name; /* policy name */ 921ddcdf265SRobert Watson char *mpc_fullname; /* policy full name */ 922ddcdf265SRobert Watson struct mac_policy_ops *mpc_ops; /* policy operations */ 923ddcdf265SRobert Watson int mpc_loadtime_flags; /* flags */ 924ddcdf265SRobert Watson int *mpc_field_off; /* security field */ 925ddcdf265SRobert Watson int mpc_runtime_flags; /* flags */ 926ddcdf265SRobert Watson LIST_ENTRY(mac_policy_conf) mpc_list; /* global list */ 927ddcdf265SRobert Watson }; 928ddcdf265SRobert Watson 929ddcdf265SRobert Watson /* Flags for the mpc_loadtime_flags field. */ 930ddcdf265SRobert Watson #define MPC_LOADTIME_FLAG_NOTLATE 0x00000001 931ddcdf265SRobert Watson #define MPC_LOADTIME_FLAG_UNLOADOK 0x00000002 932225bff6fSRobert Watson #define MPC_LOADTIME_FLAG_LABELMBUFS 0x00000004 933ddcdf265SRobert Watson 934ddcdf265SRobert Watson /* Flags for the mpc_runtime_flags field. */ 935ddcdf265SRobert Watson #define MPC_RUNTIME_FLAG_REGISTERED 0x00000001 936ddcdf265SRobert Watson 937be23ba9aSRobert Watson /*- 938be23ba9aSRobert Watson * The TrustedBSD MAC Framework has a major version number, MAC_VERSION, 939be23ba9aSRobert Watson * which defines the ABI of the Framework present in the kernel (and depended 940be23ba9aSRobert Watson * on by policy modules compiled against that kernel). Currently, 941be23ba9aSRobert Watson * MAC_POLICY_SET() requires that the kernel and module ABI version numbers 942be23ba9aSRobert Watson * exactly match. The following major versions have been defined to date: 943be23ba9aSRobert Watson * 944be23ba9aSRobert Watson * MAC version FreeBSD versions 945be23ba9aSRobert Watson * 1 5.x 946be23ba9aSRobert Watson * 2 6.x 947be23ba9aSRobert Watson * 3 7.x 948be23ba9aSRobert Watson */ 949be23ba9aSRobert Watson #define MAC_VERSION 3 950be23ba9aSRobert Watson 9515c8dd342SRobert Watson #define MAC_POLICY_SET(mpops, mpname, mpfullname, mpflags, privdata_wanted) \ 952ddcdf265SRobert Watson static struct mac_policy_conf mpname##_mac_policy_conf = { \ 953ddcdf265SRobert Watson #mpname, \ 954ddcdf265SRobert Watson mpfullname, \ 9555c8dd342SRobert Watson mpops, \ 956ddcdf265SRobert Watson mpflags, \ 957ddcdf265SRobert Watson privdata_wanted, \ 958ddcdf265SRobert Watson 0, \ 959ddcdf265SRobert Watson }; \ 960ddcdf265SRobert Watson static moduledata_t mpname##_mod = { \ 961ddcdf265SRobert Watson #mpname, \ 962ddcdf265SRobert Watson mac_policy_modevent, \ 963ddcdf265SRobert Watson &mpname##_mac_policy_conf \ 964ddcdf265SRobert Watson }; \ 965be23ba9aSRobert Watson MODULE_DEPEND(mpname, kernel_mac_support, MAC_VERSION, \ 966be23ba9aSRobert Watson MAC_VERSION, MAC_VERSION); \ 967ddcdf265SRobert Watson DECLARE_MODULE(mpname, mpname##_mod, SI_SUB_MAC_POLICY, \ 968ddcdf265SRobert Watson SI_ORDER_MIDDLE) 969ddcdf265SRobert Watson 970ddcdf265SRobert Watson int mac_policy_modevent(module_t mod, int type, void *data); 971ddcdf265SRobert Watson 9728425ae12SRobert Watson /* 9738425ae12SRobert Watson * Policy interface to map a struct label pointer to per-policy data. 9748425ae12SRobert Watson * Typically, policies wrap this in their own accessor macro that casts a 9750142affcSRobert Watson * uintptr_t to a policy-specific data type. 9768425ae12SRobert Watson */ 9770142affcSRobert Watson intptr_t mac_label_get(struct label *l, int slot); 9780142affcSRobert Watson void mac_label_set(struct label *l, int slot, intptr_t v); 979ddcdf265SRobert Watson 980d02188c1SRobert Watson #endif /* !_SYS_SECURITY_MAC_MAC_POLICY_H_ */ 981