xref: /freebsd/sys/security/mac/mac_policy.h (revision 45e0f3d63d90c6f80f3f231f3f8e185e644c70e9)
1ddcdf265SRobert Watson /*-
2f6a41092SRobert Watson  * Copyright (c) 1999-2002 Robert N. M. Watson
37f53207bSRobert Watson  * Copyright (c) 2001-2005 Networks Associates Technology, Inc.
41d82b391SRobert Watson  * Copyright (c) 2005-2006 SPARTA, Inc.
5ddcdf265SRobert Watson  * All rights reserved.
6ddcdf265SRobert Watson  *
7ddcdf265SRobert Watson  * This software was developed by Robert Watson for the TrustedBSD Project.
8ddcdf265SRobert Watson  *
96201265bSRobert Watson  * This software was developed for the FreeBSD Project in part by Network
106201265bSRobert Watson  * Associates Laboratories, the Security Research Division of Network
116201265bSRobert Watson  * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"),
126201265bSRobert Watson  * as part of the DARPA CHATS research program.
13ddcdf265SRobert Watson  *
14d26dd2d9SRobert Watson  * This software was enhanced by SPARTA ISSO under SPAWAR contract
15d26dd2d9SRobert Watson  * N66001-04-C-6019 ("SEFOS").
16d26dd2d9SRobert Watson  *
17ddcdf265SRobert Watson  * Redistribution and use in source and binary forms, with or without
18ddcdf265SRobert Watson  * modification, are permitted provided that the following conditions
19ddcdf265SRobert Watson  * are met:
20ddcdf265SRobert Watson  * 1. Redistributions of source code must retain the above copyright
21ddcdf265SRobert Watson  *    notice, this list of conditions and the following disclaimer.
22ddcdf265SRobert Watson  * 2. Redistributions in binary form must reproduce the above copyright
23ddcdf265SRobert Watson  *    notice, this list of conditions and the following disclaimer in the
24ddcdf265SRobert Watson  *    documentation and/or other materials provided with the distribution.
25ddcdf265SRobert Watson  *
26ddcdf265SRobert Watson  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
27ddcdf265SRobert Watson  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
28ddcdf265SRobert Watson  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
29ddcdf265SRobert Watson  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
30ddcdf265SRobert Watson  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31ddcdf265SRobert Watson  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32ddcdf265SRobert Watson  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33ddcdf265SRobert Watson  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34ddcdf265SRobert Watson  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35ddcdf265SRobert Watson  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36ddcdf265SRobert Watson  * SUCH DAMAGE.
37ddcdf265SRobert Watson  *
38ddcdf265SRobert Watson  * $FreeBSD$
39ddcdf265SRobert Watson  */
40ddcdf265SRobert Watson /*
41ddcdf265SRobert Watson  * Kernel interface for MAC policy modules.
42ddcdf265SRobert Watson  */
43d02188c1SRobert Watson #ifndef _SYS_SECURITY_MAC_MAC_POLICY_H_
44d02188c1SRobert Watson #define	_SYS_SECURITY_MAC_MAC_POLICY_H_
45ddcdf265SRobert Watson 
46c96ae196SRobert Watson #ifndef _KERNEL
47c96ae196SRobert Watson #error "no user-serviceable parts inside"
48c96ae196SRobert Watson #endif
49c96ae196SRobert Watson 
50ddcdf265SRobert Watson /*-
51ddcdf265SRobert Watson  * Pluggable access control policy definition structure.
52ddcdf265SRobert Watson  *
536baacecdSRobert Watson  * List of operations that are performed as part of the implementation of a
546baacecdSRobert Watson  * MAC policy.  Policy implementors declare operations with a mac_policy_ops
556baacecdSRobert Watson  * structure, and using the MAC_POLICY_SET() macro.  If an entry point is not
566baacecdSRobert Watson  * declared, then then the policy will be ignored during evaluation of that
576baacecdSRobert Watson  * event or check.
58ddcdf265SRobert Watson  *
59ddcdf265SRobert Watson  * Operations are sorted first by general class of operation, then
60ddcdf265SRobert Watson  * alphabetically.
61ddcdf265SRobert Watson  */
62aed55708SRobert Watson #include <sys/acl.h>	/* XXX acl_type_t */
63aed55708SRobert Watson 
6416fd30bdSRobert Watson struct acl;
6518717f69SRobert Watson struct auditinfo;
66343cc83eSPeter Wemm struct auditinfo_addr;
67f47cb886SRobert Watson struct bpf_d;
6817451386SRobert Watson struct cdev;
6916fd30bdSRobert Watson struct componentname;
7016fd30bdSRobert Watson struct devfs_dirent;
71f47cb886SRobert Watson struct ifnet;
72f47cb886SRobert Watson struct image_params;
73a557af22SRobert Watson struct inpcb;
7416fd30bdSRobert Watson struct ipq;
7552648411SRobert Watson struct ksem;
7616fd30bdSRobert Watson struct label;
77ddcdf265SRobert Watson struct mac_policy_conf;
7816fd30bdSRobert Watson struct mbuf;
7916fd30bdSRobert Watson struct mount;
80198e7d90SRobert Watson struct msg;
8142726d8aSRobert Watson struct msqid_kernel;
824795b82cSRobert Watson struct pipepair;
83f97e834bSRobert Watson struct proc;
84f51e5803SRobert Watson struct sbuf;
8542726d8aSRobert Watson struct semid_kernel;
8642726d8aSRobert Watson struct shmid_kernel;
87f97e834bSRobert Watson struct sockaddr;
8816fd30bdSRobert Watson struct socket;
8963dba32bSPawel Jakub Dawidek struct sysctl_oid;
9063dba32bSPawel Jakub Dawidek struct sysctl_req;
91f97e834bSRobert Watson struct thread;
9216fd30bdSRobert Watson struct ucred;
9316fd30bdSRobert Watson struct uio;
94f47cb886SRobert Watson struct vattr;
9516fd30bdSRobert Watson struct vnode;
961d82b391SRobert Watson 
97ddcdf265SRobert Watson /*
98ddcdf265SRobert Watson  * Policy module operations.
99ddcdf265SRobert Watson  */
1001d82b391SRobert Watson typedef void	(*mpo_destroy_t)(struct mac_policy_conf *mpc);
1011d82b391SRobert Watson typedef void	(*mpo_init_t)(struct mac_policy_conf *mpc);
102ddcdf265SRobert Watson 
103ddcdf265SRobert Watson /*
1043459e1d2SRobert Watson  * General policy-directed security system call so that policies may
1056baacecdSRobert Watson  * implement new services without reserving explicit system call numbers.
10627f2eac7SRobert Watson  */
1071d82b391SRobert Watson typedef int	(*mpo_syscall_t)(struct thread *td, int call, void *arg);
1081d82b391SRobert Watson 
1091d82b391SRobert Watson /*
1101d82b391SRobert Watson  * Place-holder function pointers for ABI-compatibility purposes.
1111d82b391SRobert Watson  */
1121d82b391SRobert Watson typedef void	(*mpo_placeholder_t)(void);
11327f2eac7SRobert Watson 
11427f2eac7SRobert Watson /*
1156baacecdSRobert Watson  * Label operations.  Initialize label storage, destroy label storage,
1166baacecdSRobert Watson  * recycle for re-use without init/destroy, copy a label to initialized
1176baacecdSRobert Watson  * storage, and externalize/internalize from/to initialized storage.
118ddcdf265SRobert Watson  */
1191d82b391SRobert Watson typedef void	(*mpo_init_bpfdesc_label_t)(struct label *label);
1201d82b391SRobert Watson typedef void	(*mpo_init_cred_label_t)(struct label *label);
12130575990SRobert Watson typedef void	(*mpo_init_devfs_label_t)(struct label *label);
1221d82b391SRobert Watson typedef void	(*mpo_init_ifnet_label_t)(struct label *label);
1231d82b391SRobert Watson typedef int	(*mpo_init_inpcb_label_t)(struct label *label, int flag);
1241d82b391SRobert Watson typedef void	(*mpo_init_sysv_msgmsg_label_t)(struct label *label);
1251d82b391SRobert Watson typedef void	(*mpo_init_sysv_msgqueue_label_t)(struct label *label);
1261d82b391SRobert Watson typedef void	(*mpo_init_sysv_sem_label_t)(struct label *label);
1271d82b391SRobert Watson typedef void	(*mpo_init_sysv_shm_label_t)(struct label *label);
1281d82b391SRobert Watson typedef int	(*mpo_init_ipq_label_t)(struct label *label, int flag);
1291d82b391SRobert Watson typedef int	(*mpo_init_mbuf_label_t)(struct label *label, int flag);
1301d82b391SRobert Watson typedef void	(*mpo_init_mount_label_t)(struct label *label);
1311d82b391SRobert Watson typedef int	(*mpo_init_socket_label_t)(struct label *label, int flag);
1321d82b391SRobert Watson typedef int	(*mpo_init_socket_peer_label_t)(struct label *label,
1331d82b391SRobert Watson 		    int flag);
1341d82b391SRobert Watson typedef void	(*mpo_init_pipe_label_t)(struct label *label);
1351d82b391SRobert Watson typedef void    (*mpo_init_posix_sem_label_t)(struct label *label);
1361d82b391SRobert Watson typedef void	(*mpo_init_proc_label_t)(struct label *label);
1371d82b391SRobert Watson typedef void	(*mpo_init_vnode_label_t)(struct label *label);
1381d82b391SRobert Watson typedef void	(*mpo_destroy_bpfdesc_label_t)(struct label *label);
1391d82b391SRobert Watson typedef void	(*mpo_destroy_cred_label_t)(struct label *label);
14030575990SRobert Watson typedef void	(*mpo_destroy_devfs_label_t)(struct label *label);
1411d82b391SRobert Watson typedef void	(*mpo_destroy_ifnet_label_t)(struct label *label);
1421d82b391SRobert Watson typedef void	(*mpo_destroy_inpcb_label_t)(struct label *label);
1431d82b391SRobert Watson typedef void	(*mpo_destroy_sysv_msgmsg_label_t)(struct label *label);
1441d82b391SRobert Watson typedef void	(*mpo_destroy_sysv_msgqueue_label_t)(struct label *label);
1451d82b391SRobert Watson typedef void	(*mpo_destroy_sysv_sem_label_t)(struct label *label);
1461d82b391SRobert Watson typedef void	(*mpo_destroy_sysv_shm_label_t)(struct label *label);
1471d82b391SRobert Watson typedef void	(*mpo_destroy_ipq_label_t)(struct label *label);
1481d82b391SRobert Watson typedef void	(*mpo_destroy_mbuf_label_t)(struct label *label);
1491d82b391SRobert Watson typedef void	(*mpo_destroy_mount_label_t)(struct label *label);
1501d82b391SRobert Watson typedef void	(*mpo_destroy_socket_label_t)(struct label *label);
1511d82b391SRobert Watson typedef void	(*mpo_destroy_socket_peer_label_t)(struct label *label);
1521d82b391SRobert Watson typedef void	(*mpo_destroy_pipe_label_t)(struct label *label);
1531d82b391SRobert Watson typedef void    (*mpo_destroy_posix_sem_label_t)(struct label *label);
1541d82b391SRobert Watson typedef void	(*mpo_destroy_proc_label_t)(struct label *label);
1551d82b391SRobert Watson typedef void	(*mpo_destroy_vnode_label_t)(struct label *label);
1561d82b391SRobert Watson typedef void	(*mpo_cleanup_sysv_msgmsg_t)(struct label *msglabel);
1571d82b391SRobert Watson typedef void	(*mpo_cleanup_sysv_msgqueue_t)(struct label *msqlabel);
1581d82b391SRobert Watson typedef void	(*mpo_cleanup_sysv_sem_t)(struct label *semalabel);
1591d82b391SRobert Watson typedef void	(*mpo_cleanup_sysv_shm_t)(struct label *shmlabel);
1601d82b391SRobert Watson typedef void	(*mpo_copy_cred_label_t)(struct label *src,
16156d9e932SRobert Watson 		    struct label *dest);
1621d82b391SRobert Watson typedef void	(*mpo_copy_ifnet_label_t)(struct label *src,
1632220907bSRobert Watson 		    struct label *dest);
1641d82b391SRobert Watson typedef void	(*mpo_copy_mbuf_label_t)(struct label *src,
165225bff6fSRobert Watson 		    struct label *dest);
1661d82b391SRobert Watson typedef void	(*mpo_copy_pipe_label_t)(struct label *src,
167475b9d0aSRobert Watson 		    struct label *dest);
1681d82b391SRobert Watson typedef void	(*mpo_copy_socket_label_t)(struct label *src,
169b0323ea3SRobert Watson 		    struct label *dest);
1701d82b391SRobert Watson typedef void	(*mpo_copy_vnode_label_t)(struct label *src,
171475b9d0aSRobert Watson 		    struct label *dest);
1721d82b391SRobert Watson typedef int	(*mpo_externalize_cred_label_t)(struct label *label,
173f51e5803SRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
1741d82b391SRobert Watson typedef int	(*mpo_externalize_ifnet_label_t)(struct label *label,
175f51e5803SRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
1761d82b391SRobert Watson typedef int	(*mpo_externalize_pipe_label_t)(struct label *label,
177f51e5803SRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
1781d82b391SRobert Watson typedef int	(*mpo_externalize_socket_label_t)(struct label *label,
179f51e5803SRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
1801d82b391SRobert Watson typedef int	(*mpo_externalize_socket_peer_label_t)(struct label *label,
181f51e5803SRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
1821d82b391SRobert Watson typedef int	(*mpo_externalize_vnode_label_t)(struct label *label,
183f51e5803SRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
1841d82b391SRobert Watson typedef int	(*mpo_internalize_cred_label_t)(struct label *label,
185475b9d0aSRobert Watson 		    char *element_name, char *element_data, int *claimed);
1861d82b391SRobert Watson typedef int	(*mpo_internalize_ifnet_label_t)(struct label *label,
187475b9d0aSRobert Watson 		    char *element_name, char *element_data, int *claimed);
1881d82b391SRobert Watson typedef int	(*mpo_internalize_pipe_label_t)(struct label *label,
189475b9d0aSRobert Watson 		    char *element_name, char *element_data, int *claimed);
1901d82b391SRobert Watson typedef int	(*mpo_internalize_socket_label_t)(struct label *label,
191475b9d0aSRobert Watson 		    char *element_name, char *element_data, int *claimed);
1921d82b391SRobert Watson typedef int	(*mpo_internalize_vnode_label_t)(struct label *label,
193475b9d0aSRobert Watson 		    char *element_name, char *element_data, int *claimed);
194ddcdf265SRobert Watson 
195ddcdf265SRobert Watson /*
1966baacecdSRobert Watson  * Labeling event operations: file system objects, and things that look a lot
1976baacecdSRobert Watson  * like file system objects.
198ddcdf265SRobert Watson  */
1991d82b391SRobert Watson typedef void	(*mpo_associate_vnode_devfs_t)(struct mount *mp,
20026ae2b86SRobert Watson 		    struct label *mplabel, struct devfs_dirent *de,
201763bbd2fSRobert Watson 		    struct label *delabel, struct vnode *vp,
20226ae2b86SRobert Watson 		    struct label *vplabel);
2031d82b391SRobert Watson typedef int	(*mpo_associate_vnode_extattr_t)(struct mount *mp,
20426ae2b86SRobert Watson 		    struct label *mplabel, struct vnode *vp,
20526ae2b86SRobert Watson 		    struct label *vplabel);
2061d82b391SRobert Watson typedef void	(*mpo_associate_vnode_singlelabel_t)(struct mount *mp,
20726ae2b86SRobert Watson 		    struct label *mplabel, struct vnode *vp,
20826ae2b86SRobert Watson 		    struct label *vplabel);
2091d82b391SRobert Watson typedef void	(*mpo_create_devfs_device_t)(struct ucred *cred,
210d26dd2d9SRobert Watson 		    struct mount *mp, struct cdev *dev,
21126ae2b86SRobert Watson 		    struct devfs_dirent *de, struct label *delabel);
2121d82b391SRobert Watson typedef void	(*mpo_create_devfs_directory_t)(struct mount *mp,
2131d82b391SRobert Watson 		    char *dirname, int dirnamelen, struct devfs_dirent *de,
21426ae2b86SRobert Watson 		    struct label *delabel);
2151d82b391SRobert Watson typedef void	(*mpo_create_devfs_symlink_t)(struct ucred *cred,
216990b4b2dSRobert Watson 		    struct mount *mp, struct devfs_dirent *dd,
217990b4b2dSRobert Watson 		    struct label *ddlabel, struct devfs_dirent *de,
218990b4b2dSRobert Watson 		    struct label *delabel);
2191d82b391SRobert Watson typedef int	(*mpo_create_vnode_extattr_t)(struct ucred *cred,
22026ae2b86SRobert Watson 		    struct mount *mp, struct label *mplabel,
22126ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
22226ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
223763bbd2fSRobert Watson 		    struct componentname *cnp);
2241d82b391SRobert Watson typedef void	(*mpo_create_mount_t)(struct ucred *cred, struct mount *mp,
22526ae2b86SRobert Watson 		    struct label *mplabel);
2261d82b391SRobert Watson typedef void	(*mpo_relabel_vnode_t)(struct ucred *cred, struct vnode *vp,
22726ae2b86SRobert Watson 		    struct label *vplabel, struct label *label);
2281d82b391SRobert Watson typedef int	(*mpo_setlabel_vnode_extattr_t)(struct ucred *cred,
22926ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
230763bbd2fSRobert Watson 		    struct label *intlabel);
23130575990SRobert Watson typedef void	(*mpo_update_devfs_t)(struct mount *mp,
23226ae2b86SRobert Watson 		    struct devfs_dirent *de, struct label *delabel,
23326ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
234ddcdf265SRobert Watson 
235ddcdf265SRobert Watson /*
236ddcdf265SRobert Watson  * Labeling event operations: IPC objects.
237ddcdf265SRobert Watson  */
2381d82b391SRobert Watson typedef void	(*mpo_create_mbuf_from_socket_t)(struct socket *so,
23926ae2b86SRobert Watson 		    struct label *solabel, struct mbuf *m,
24026ae2b86SRobert Watson 		    struct label *mlabel);
2411d82b391SRobert Watson typedef void	(*mpo_create_socket_t)(struct ucred *cred, struct socket *so,
24226ae2b86SRobert Watson 		    struct label *solabel);
24326ae2b86SRobert Watson typedef void	(*mpo_create_socket_from_socket_t)(struct socket *oldso,
24426ae2b86SRobert Watson 		    struct label *oldsolabel, struct socket *newso,
24526ae2b86SRobert Watson 		    struct label *newsolabel);
2461d82b391SRobert Watson typedef void	(*mpo_relabel_socket_t)(struct ucred *cred, struct socket *so,
247ddcdf265SRobert Watson 		    struct label *oldlabel, struct label *newlabel);
2481d82b391SRobert Watson typedef void	(*mpo_relabel_pipe_t)(struct ucred *cred, struct pipepair *pp,
249ddcdf265SRobert Watson 		    struct label *oldlabel, struct label *newlabel);
25026ae2b86SRobert Watson typedef void	(*mpo_set_socket_peer_from_mbuf_t)(struct mbuf *m,
25126ae2b86SRobert Watson 		    struct label *mlabel, struct socket *so,
25226ae2b86SRobert Watson 		    struct label *sopeerlabel);
25326ae2b86SRobert Watson typedef void	(*mpo_set_socket_peer_from_socket_t)(struct socket *oldso,
25426ae2b86SRobert Watson 		    struct label *oldsolabel, struct socket *newso,
25526ae2b86SRobert Watson 		    struct label *newsopeerlabel);
2561d82b391SRobert Watson typedef void	(*mpo_create_pipe_t)(struct ucred *cred, struct pipepair *pp,
25726ae2b86SRobert Watson 		    struct label *pplabel);
258ddcdf265SRobert Watson 
259ddcdf265SRobert Watson /*
26042726d8aSRobert Watson  * Labeling event operations: System V IPC primitives.
26142726d8aSRobert Watson  */
2621d82b391SRobert Watson typedef void	(*mpo_create_sysv_msgmsg_t)(struct ucred *cred,
26342726d8aSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqlabel,
26442726d8aSRobert Watson 		    struct msg *msgptr, struct label *msglabel);
2651d82b391SRobert Watson typedef void	(*mpo_create_sysv_msgqueue_t)(struct ucred *cred,
26642726d8aSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqlabel);
2671d82b391SRobert Watson typedef void	(*mpo_create_sysv_sem_t)(struct ucred *cred,
26842726d8aSRobert Watson 		    struct semid_kernel *semakptr, struct label *semalabel);
2691d82b391SRobert Watson typedef void	(*mpo_create_sysv_shm_t)(struct ucred *cred,
27042726d8aSRobert Watson 		    struct shmid_kernel *shmsegptr, struct label *shmlabel);
27142726d8aSRobert Watson 
27242726d8aSRobert Watson /*
27352648411SRobert Watson  * Labeling event operations: POSIX (global/inter-process) semaphores.
27452648411SRobert Watson  */
2751d82b391SRobert Watson typedef void	(*mpo_create_posix_sem_t)(struct ucred *cred,
27652648411SRobert Watson 		    struct ksem *ksemptr, struct label *ks_label);
27752648411SRobert Watson 
27852648411SRobert Watson /*
279ddcdf265SRobert Watson  * Labeling event operations: network objects.
280ddcdf265SRobert Watson  */
2811d82b391SRobert Watson typedef void	(*mpo_create_bpfdesc_t)(struct ucred *cred,
28226ae2b86SRobert Watson 		    struct bpf_d *d, struct label *dlabel);
28326ae2b86SRobert Watson typedef void	(*mpo_create_ifnet_t)(struct ifnet *ifp,
28426ae2b86SRobert Watson 		    struct label *ifplabel);
2851d82b391SRobert Watson typedef void	(*mpo_create_inpcb_from_socket_t)(struct socket *so,
286a557af22SRobert Watson 		    struct label *solabel, struct inpcb *inp,
287a557af22SRobert Watson 		    struct label *inplabel);
28826ae2b86SRobert Watson typedef void	(*mpo_create_ipq_t)(struct mbuf *m, struct label *mlabel,
28926ae2b86SRobert Watson 		    struct ipq *ipq, struct label *ipqlabel);
2901d82b391SRobert Watson typedef void	(*mpo_create_datagram_from_ipq)
29126ae2b86SRobert Watson 		    (struct ipq *ipq, struct label *ipqlabel, struct mbuf *m,
29226ae2b86SRobert Watson 		    struct label *mlabel);
29326ae2b86SRobert Watson typedef void	(*mpo_create_fragment_t)(struct mbuf *m,
29426ae2b86SRobert Watson 		    struct label *mlabel, struct mbuf *frag,
29526ae2b86SRobert Watson 		    struct label *fraglabel);
2961d82b391SRobert Watson typedef void	(*mpo_create_mbuf_from_inpcb_t)(struct inpcb *inp,
2972d92ec98SRobert Watson 		    struct label *inplabel, struct mbuf *m,
2982d92ec98SRobert Watson 		    struct label *mlabel);
29926ae2b86SRobert Watson typedef void	(*mpo_create_mbuf_linklayer_t)(struct ifnet *ifp,
30026ae2b86SRobert Watson 		    struct label *ifplabel, struct mbuf *m,
30126ae2b86SRobert Watson 		    struct label *mlabel);
30226ae2b86SRobert Watson typedef void	(*mpo_create_mbuf_from_bpfdesc_t)(struct bpf_d *d,
30326ae2b86SRobert Watson 		    struct label *dlabel, struct mbuf *m,
30426ae2b86SRobert Watson 		    struct label *mlabel);
30526ae2b86SRobert Watson typedef void	(*mpo_create_mbuf_from_ifnet_t)(struct ifnet *ifp,
30626ae2b86SRobert Watson 		    struct label *ifplabel, struct mbuf *m,
30726ae2b86SRobert Watson 		    struct label *mlabel);
30826ae2b86SRobert Watson typedef void	(*mpo_create_mbuf_multicast_encap_t)(struct mbuf *m,
30926ae2b86SRobert Watson 		    struct label *mlabel, struct ifnet *ifp,
31026ae2b86SRobert Watson 		    struct label *ifplabel, struct mbuf *mnew,
31126ae2b86SRobert Watson 		    struct label *mnewlabel);
31226ae2b86SRobert Watson typedef void	(*mpo_create_mbuf_netlayer_t)(struct mbuf *m,
31326ae2b86SRobert Watson 		    struct label *mlabel, struct mbuf *mnew,
31426ae2b86SRobert Watson 		    struct label *mnewlabel);
31526ae2b86SRobert Watson typedef int	(*mpo_fragment_match_t)(struct mbuf *m, struct label *mlabel,
31626ae2b86SRobert Watson 		    struct ipq *ipq, struct label *ipqlabel);
3171d82b391SRobert Watson typedef void	(*mpo_reflect_mbuf_icmp_t)(struct mbuf *m,
318eb8c7f99SRobert Watson 		    struct label *mlabel);
3191d82b391SRobert Watson typedef void	(*mpo_reflect_mbuf_tcp_t)(struct mbuf *m,
3201d82b391SRobert Watson 		    struct label *mlabel);
32126ae2b86SRobert Watson typedef void	(*mpo_relabel_ifnet_t)(struct ucred *cred, struct ifnet *ifp,
32226ae2b86SRobert Watson 		    struct label *ifplabel, struct label *newlabel);
32326ae2b86SRobert Watson typedef void	(*mpo_update_ipq_t)(struct mbuf *m, struct label *mlabel,
32426ae2b86SRobert Watson 		    struct ipq *ipq, struct label *ipqlabel);
3251d82b391SRobert Watson typedef void	(*mpo_inpcb_sosetlabel_t)(struct socket *so,
326a557af22SRobert Watson 		    struct label *label, struct inpcb *inp,
327a557af22SRobert Watson 		    struct label *inplabel);
328ddcdf265SRobert Watson 
329d94f2a68SChristian S.J. Peron typedef	void	(*mpo_create_mbuf_from_firewall_t)(struct mbuf *m,
330d94f2a68SChristian S.J. Peron 		    struct label *label);
331826cef3dSChristian S.J. Peron typedef void	(*mpo_destroy_syncache_label_t)(struct label *label);
332826cef3dSChristian S.J. Peron typedef int	(*mpo_init_syncache_label_t)(struct label *label, int flag);
333826cef3dSChristian S.J. Peron typedef void	(*mpo_init_syncache_from_inpcb_t)(struct label *label,
334826cef3dSChristian S.J. Peron 		    struct inpcb *inp);
335826cef3dSChristian S.J. Peron typedef void	(*mpo_create_mbuf_from_syncache_t)(struct label *sc_label,
33626ae2b86SRobert Watson 		    struct mbuf *m, struct label *mlabel);
337ddcdf265SRobert Watson /*
338ddcdf265SRobert Watson  * Labeling event operations: processes.
339ddcdf265SRobert Watson  */
3401d82b391SRobert Watson typedef void	(*mpo_execve_transition_t)(struct ucred *old,
3411d82b391SRobert Watson 		    struct ucred *new, struct vnode *vp,
34226ae2b86SRobert Watson 		    struct label *vplabel, struct label *interpvnodelabel,
3431d82b391SRobert Watson 		    struct image_params *imgp, struct label *execlabel);
3441d82b391SRobert Watson typedef int	(*mpo_execve_will_transition_t)(struct ucred *old,
34526ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
346670cb89bSRobert Watson 		    struct label *interpvnodelabel,
3479fa3506eSRobert Watson 		    struct image_params *imgp, struct label *execlabel);
3481d82b391SRobert Watson typedef void	(*mpo_create_proc0_t)(struct ucred *cred);
3491d82b391SRobert Watson typedef void	(*mpo_create_proc1_t)(struct ucred *cred);
3501d82b391SRobert Watson typedef void	(*mpo_relabel_cred_t)(struct ucred *cred,
351ddcdf265SRobert Watson 		    struct label *newlabel);
3521d82b391SRobert Watson typedef void	(*mpo_thread_userret_t)(struct thread *thread);
353ddcdf265SRobert Watson 
354ddcdf265SRobert Watson /*
355ddcdf265SRobert Watson  * Access control checks.
356ddcdf265SRobert Watson  */
35726ae2b86SRobert Watson typedef	int	(*mpo_check_bpfdesc_receive_t)(struct bpf_d *d,
35826ae2b86SRobert Watson 		    struct label *dlabel, struct ifnet *ifp,
35926ae2b86SRobert Watson 		    struct label *ifplabel);
3601d82b391SRobert Watson typedef int	(*mpo_check_cred_relabel_t)(struct ucred *cred,
361ddcdf265SRobert Watson 		    struct label *newlabel);
36226ae2b86SRobert Watson typedef int	(*mpo_check_cred_visible_t)(struct ucred *cr1,
36326ae2b86SRobert Watson 		    struct ucred *cr2);
3641d82b391SRobert Watson typedef int	(*mpo_check_ifnet_relabel_t)(struct ucred *cred,
36526ae2b86SRobert Watson 		    struct ifnet *ifp, struct label *ifplabel,
366ddcdf265SRobert Watson 		    struct label *newlabel);
36726ae2b86SRobert Watson typedef int	(*mpo_check_ifnet_transmit_t)(struct ifnet *ifp,
36826ae2b86SRobert Watson 		    struct label *ifplabel, struct mbuf *m,
36926ae2b86SRobert Watson 		    struct label *mlabel);
3701d82b391SRobert Watson typedef int	(*mpo_check_inpcb_deliver_t)(struct inpcb *inp,
371a557af22SRobert Watson 		    struct label *inplabel, struct mbuf *m,
372a557af22SRobert Watson 		    struct label *mlabel);
3731d82b391SRobert Watson typedef int	(*mpo_check_sysv_msgmsq_t)(struct ucred *cred,
37442726d8aSRobert Watson 		    struct msg *msgptr, struct label *msglabel,
37542726d8aSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel);
3761d82b391SRobert Watson typedef int	(*mpo_check_sysv_msgrcv_t)(struct ucred *cred,
37742726d8aSRobert Watson 		    struct msg *msgptr, struct label *msglabel);
3781d82b391SRobert Watson typedef int	(*mpo_check_sysv_msgrmid_t)(struct ucred *cred,
37942726d8aSRobert Watson 		    struct msg *msgptr, struct label *msglabel);
3801d82b391SRobert Watson typedef int	(*mpo_check_sysv_msqget_t)(struct ucred *cred,
38142726d8aSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel);
3821d82b391SRobert Watson typedef int	(*mpo_check_sysv_msqsnd_t)(struct ucred *cred,
38342726d8aSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel);
3841d82b391SRobert Watson typedef int	(*mpo_check_sysv_msqrcv_t)(struct ucred *cred,
38542726d8aSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel);
3861d82b391SRobert Watson typedef int	(*mpo_check_sysv_msqctl_t)(struct ucred *cred,
38742726d8aSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel,
38842726d8aSRobert Watson 		    int cmd);
3891d82b391SRobert Watson typedef int	(*mpo_check_sysv_semctl_t)(struct ucred *cred,
39042726d8aSRobert Watson 		    struct semid_kernel *semakptr, struct label *semaklabel,
39142726d8aSRobert Watson 		    int cmd);
3921d82b391SRobert Watson typedef int	(*mpo_check_sysv_semget_t)(struct ucred *cred,
39342726d8aSRobert Watson 		    struct semid_kernel *semakptr, struct label *semaklabel);
3941d82b391SRobert Watson typedef int	(*mpo_check_sysv_semop_t)(struct ucred *cred,
39542726d8aSRobert Watson 		    struct semid_kernel *semakptr, struct label *semaklabel,
39642726d8aSRobert Watson 		    size_t accesstype);
3971d82b391SRobert Watson typedef int	(*mpo_check_sysv_shmat_t)(struct ucred *cred,
39842726d8aSRobert Watson 		    struct shmid_kernel *shmsegptr,
39942726d8aSRobert Watson 		    struct label *shmseglabel, int shmflg);
4001d82b391SRobert Watson typedef int	(*mpo_check_sysv_shmctl_t)(struct ucred *cred,
40142726d8aSRobert Watson 		    struct shmid_kernel *shmsegptr,
40242726d8aSRobert Watson 		    struct label *shmseglabel, int cmd);
4031d82b391SRobert Watson typedef int	(*mpo_check_sysv_shmdt_t)(struct ucred *cred,
40442726d8aSRobert Watson 		    struct shmid_kernel *shmsegptr,
40542726d8aSRobert Watson 		    struct label *shmseglabel);
4061d82b391SRobert Watson typedef int	(*mpo_check_sysv_shmget_t)(struct ucred *cred,
40742726d8aSRobert Watson 		    struct shmid_kernel *shmsegptr,
40842726d8aSRobert Watson 		    struct label *shmseglabel, int shmflg);
4091d82b391SRobert Watson typedef int	(*mpo_check_kenv_dump_t)(struct ucred *cred);
4101d82b391SRobert Watson typedef int	(*mpo_check_kenv_get_t)(struct ucred *cred, char *name);
4111d82b391SRobert Watson typedef int	(*mpo_check_kenv_set_t)(struct ucred *cred, char *name,
412e686e5aeSRobert Watson 		    char *value);
4131d82b391SRobert Watson typedef int	(*mpo_check_kenv_unset_t)(struct ucred *cred, char *name);
4141d82b391SRobert Watson typedef int	(*mpo_check_kld_load_t)(struct ucred *cred, struct vnode *vp,
41526ae2b86SRobert Watson 		    struct label *vplabel);
4161d82b391SRobert Watson typedef int	(*mpo_check_kld_stat_t)(struct ucred *cred);
4171d82b391SRobert Watson typedef int	(*mpo_mpo_placeholder19_t)(void);
4181d82b391SRobert Watson typedef int	(*mpo_mpo_placeholder20_t)(void);
4191d82b391SRobert Watson typedef int	(*mpo_check_mount_stat_t)(struct ucred *cred,
42026ae2b86SRobert Watson 		    struct mount *mp, struct label *mplabel);
4211d82b391SRobert Watson typedef int	(*mpo_mpo_placeholder21_t)(void);
4221d82b391SRobert Watson typedef int	(*mpo_check_pipe_ioctl_t)(struct ucred *cred,
42326ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel,
4244795b82cSRobert Watson 		    unsigned long cmd, void *data);
4251d82b391SRobert Watson typedef int	(*mpo_check_pipe_poll_t)(struct ucred *cred,
42626ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel);
4271d82b391SRobert Watson typedef int	(*mpo_check_pipe_read_t)(struct ucred *cred,
42826ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel);
4291d82b391SRobert Watson typedef int	(*mpo_check_pipe_relabel_t)(struct ucred *cred,
43026ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel,
431ddcdf265SRobert Watson 		    struct label *newlabel);
4321d82b391SRobert Watson typedef int	(*mpo_check_pipe_stat_t)(struct ucred *cred,
43326ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel);
4341d82b391SRobert Watson typedef int	(*mpo_check_pipe_write_t)(struct ucred *cred,
43526ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel);
4361d82b391SRobert Watson typedef int	(*mpo_check_posix_sem_destroy_t)(struct ucred *cred,
43752648411SRobert Watson 		    struct ksem *ksemptr, struct label *ks_label);
4381d82b391SRobert Watson typedef int	(*mpo_check_posix_sem_getvalue_t)(struct ucred *cred,
43952648411SRobert Watson 		    struct ksem *ksemptr, struct label *ks_label);
4401d82b391SRobert Watson typedef int	(*mpo_check_posix_sem_open_t)(struct ucred *cred,
44152648411SRobert Watson 		    struct ksem *ksemptr, struct label *ks_label);
4421d82b391SRobert Watson typedef int	(*mpo_check_posix_sem_post_t)(struct ucred *cred,
44352648411SRobert Watson 		    struct ksem *ksemptr, struct label *ks_label);
4441d82b391SRobert Watson typedef int	(*mpo_check_posix_sem_unlink_t)(struct ucred *cred,
44552648411SRobert Watson 		    struct ksem *ksemptr, struct label *ks_label);
4461d82b391SRobert Watson typedef int	(*mpo_check_posix_sem_wait_t)(struct ucred *cred,
44752648411SRobert Watson 		    struct ksem *ksemptr, struct label *ks_label);
4481d82b391SRobert Watson typedef int	(*mpo_check_proc_debug_t)(struct ucred *cred,
44926ae2b86SRobert Watson 		    struct proc *p);
4501d82b391SRobert Watson typedef int	(*mpo_check_proc_sched_t)(struct ucred *cred,
45126ae2b86SRobert Watson 		    struct proc *p);
45218717f69SRobert Watson typedef int	(*mpo_check_proc_setaudit_t)(struct ucred *cred,
45318717f69SRobert Watson 		    struct auditinfo *ai);
454f1e8bf6dSRobert Watson typedef int	(*mpo_check_proc_setaudit_addr_t)(struct ucred *cred,
455f1e8bf6dSRobert Watson 		    struct auditinfo_addr *aia);
45618717f69SRobert Watson typedef int	(*mpo_check_proc_setauid_t)(struct ucred *cred, uid_t auid);
4571d82b391SRobert Watson typedef int	(*mpo_check_proc_setuid_t)(struct ucred *cred, uid_t uid);
4581d82b391SRobert Watson typedef int	(*mpo_check_proc_seteuid_t)(struct ucred *cred, uid_t euid);
4591d82b391SRobert Watson typedef int	(*mpo_check_proc_setgid_t)(struct ucred *cred, gid_t gid);
4601d82b391SRobert Watson typedef int	(*mpo_check_proc_setegid_t)(struct ucred *cred, gid_t egid);
4611d82b391SRobert Watson typedef int	(*mpo_check_proc_setgroups_t)(struct ucred *cred, int ngroups,
462030a28b3SRobert Watson 		    gid_t *gidset);
4631d82b391SRobert Watson typedef int	(*mpo_check_proc_setreuid_t)(struct ucred *cred, uid_t ruid,
464030a28b3SRobert Watson 		    uid_t euid);
4651d82b391SRobert Watson typedef int	(*mpo_check_proc_setregid_t)(struct ucred *cred, gid_t rgid,
466030a28b3SRobert Watson 		    gid_t egid);
4671d82b391SRobert Watson typedef int	(*mpo_check_proc_setresuid_t)(struct ucred *cred, uid_t ruid,
468030a28b3SRobert Watson 		    uid_t euid, uid_t suid);
4691d82b391SRobert Watson typedef int	(*mpo_check_proc_setresgid_t)(struct ucred *cred, gid_t rgid,
470030a28b3SRobert Watson 		    gid_t egid, gid_t sgid);
4711d82b391SRobert Watson typedef int	(*mpo_check_proc_signal_t)(struct ucred *cred,
472ddcdf265SRobert Watson 		    struct proc *proc, int signum);
4731d82b391SRobert Watson typedef int	(*mpo_check_proc_wait_t)(struct ucred *cred,
474babe9a2bSRobert Watson 		    struct proc *proc);
4751d82b391SRobert Watson typedef int	(*mpo_check_socket_accept_t)(struct ucred *cred,
47626ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
4771d82b391SRobert Watson typedef int	(*mpo_check_socket_bind_t)(struct ucred *cred,
47826ae2b86SRobert Watson 		    struct socket *so, struct label *solabel,
47926ae2b86SRobert Watson 		    struct sockaddr *sa);
4801d82b391SRobert Watson typedef int	(*mpo_check_socket_connect_t)(struct ucred *cred,
48126ae2b86SRobert Watson 		    struct socket *so, struct label *solabel,
48226ae2b86SRobert Watson 		    struct sockaddr *sa);
4831d82b391SRobert Watson typedef int	(*mpo_check_socket_create_t)(struct ucred *cred, int domain,
4846758f88eSRobert Watson 		    int type, int protocol);
4851d82b391SRobert Watson typedef int	(*mpo_check_socket_deliver_t)(struct socket *so,
48626ae2b86SRobert Watson 		    struct label *solabel, struct mbuf *m,
48726ae2b86SRobert Watson 		    struct label *mlabel);
4881d82b391SRobert Watson typedef int	(*mpo_check_socket_listen_t)(struct ucred *cred,
48926ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
4901d82b391SRobert Watson typedef int	(*mpo_check_socket_poll_t)(struct ucred *cred,
49126ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
4921d82b391SRobert Watson typedef int	(*mpo_check_socket_receive_t)(struct ucred *cred,
49326ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
4941d82b391SRobert Watson typedef int	(*mpo_check_socket_relabel_t)(struct ucred *cred,
49526ae2b86SRobert Watson 		    struct socket *so, struct label *solabel,
496ddcdf265SRobert Watson 		    struct label *newlabel);
4971d82b391SRobert Watson typedef int	(*mpo_check_socket_send_t)(struct ucred *cred,
49826ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
4991d82b391SRobert Watson typedef int	(*mpo_check_socket_stat_t)(struct ucred *cred,
50026ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
5011d82b391SRobert Watson typedef int	(*mpo_check_socket_visible_t)(struct ucred *cred,
50226ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
5031d82b391SRobert Watson typedef int	(*mpo_check_system_acct_t)(struct ucred *cred,
50426ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
50518717f69SRobert Watson typedef int	(*mpo_check_system_audit_t)(struct ucred *cred, void *record,
50618717f69SRobert Watson 		    int length);
50718717f69SRobert Watson typedef int	(*mpo_check_system_auditctl_t)(struct ucred *cred,
50818717f69SRobert Watson 		    struct vnode *vp, struct label *vplabel);
50918717f69SRobert Watson typedef int	(*mpo_check_system_auditon_t)(struct ucred *cred, int cmd);
5101d82b391SRobert Watson typedef int	(*mpo_check_system_reboot_t)(struct ucred *cred, int howto);
5111d82b391SRobert Watson typedef int	(*mpo_check_system_swapon_t)(struct ucred *cred,
51226ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
5131d82b391SRobert Watson typedef int	(*mpo_check_system_swapoff_t)(struct ucred *cred,
51426ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
5151d82b391SRobert Watson typedef int	(*mpo_check_system_sysctl_t)(struct ucred *cred,
51663dba32bSPawel Jakub Dawidek 		    struct sysctl_oid *oidp, void *arg1, int arg2,
51763dba32bSPawel Jakub Dawidek 		    struct sysctl_req *req);
5181d82b391SRobert Watson typedef int	(*mpo_check_vnode_access_t)(struct ucred *cred,
51926ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, int acc_mode);
5201d82b391SRobert Watson typedef int	(*mpo_check_vnode_chdir_t)(struct ucred *cred,
52126ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel);
5221d82b391SRobert Watson typedef int	(*mpo_check_vnode_chroot_t)(struct ucred *cred,
52326ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel);
5241d82b391SRobert Watson typedef int	(*mpo_check_vnode_create_t)(struct ucred *cred,
52526ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
526ddcdf265SRobert Watson 		    struct componentname *cnp, struct vattr *vap);
5271d82b391SRobert Watson typedef int	(*mpo_check_vnode_deleteacl_t)(struct ucred *cred,
52826ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
52926ae2b86SRobert Watson 		    acl_type_t type);
5301d82b391SRobert Watson typedef int	(*mpo_check_vnode_deleteextattr_t)(struct ucred *cred,
53126ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
53226ae2b86SRobert Watson 		    int attrnamespace, const char *name);
5331d82b391SRobert Watson typedef int	(*mpo_check_vnode_exec_t)(struct ucred *cred,
53426ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
5351d82b391SRobert Watson 		    struct image_params *imgp, struct label *execlabel);
5361d82b391SRobert Watson typedef int	(*mpo_check_vnode_getacl_t)(struct ucred *cred,
53726ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
53826ae2b86SRobert Watson 		    acl_type_t type);
5391d82b391SRobert Watson typedef int	(*mpo_check_vnode_getextattr_t)(struct ucred *cred,
54026ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
54126ae2b86SRobert Watson 		    int attrnamespace, const char *name, struct uio *uio);
5421d82b391SRobert Watson typedef int	(*mpo_check_vnode_link_t)(struct ucred *cred,
54326ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
54426ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
54526ae2b86SRobert Watson 		    struct componentname *cnp);
5461d82b391SRobert Watson typedef int	(*mpo_check_vnode_listextattr_t)(struct ucred *cred,
54726ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
5481d82b391SRobert Watson 		    int attrnamespace);
5491d82b391SRobert Watson typedef int	(*mpo_check_vnode_lookup_t)(struct ucred *cred,
55026ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
551ddcdf265SRobert Watson 		    struct componentname *cnp);
5521d82b391SRobert Watson typedef int	(*mpo_check_vnode_mmap_t)(struct ucred *cred,
5531d82b391SRobert Watson 		    struct vnode *vp, struct label *label, int prot,
5541d82b391SRobert Watson 		    int flags);
5551d82b391SRobert Watson typedef void	(*mpo_check_vnode_mmap_downgrade_t)(struct ucred *cred,
55626ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, int *prot);
5571d82b391SRobert Watson typedef int	(*mpo_check_vnode_mprotect_t)(struct ucred *cred,
55826ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, int prot);
5591d82b391SRobert Watson typedef int	(*mpo_check_vnode_open_t)(struct ucred *cred,
56026ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, int acc_mode);
5611d82b391SRobert Watson typedef int	(*mpo_check_vnode_poll_t)(struct ucred *active_cred,
562177142e4SRobert Watson 		    struct ucred *file_cred, struct vnode *vp,
56326ae2b86SRobert Watson 		    struct label *vplabel);
5641d82b391SRobert Watson typedef int	(*mpo_check_vnode_read_t)(struct ucred *active_cred,
565177142e4SRobert Watson 		    struct ucred *file_cred, struct vnode *vp,
56626ae2b86SRobert Watson 		    struct label *vplabel);
5671d82b391SRobert Watson typedef int	(*mpo_check_vnode_readdir_t)(struct ucred *cred,
56826ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel);
5691d82b391SRobert Watson typedef int	(*mpo_check_vnode_readlink_t)(struct ucred *cred,
57026ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
5711d82b391SRobert Watson typedef int	(*mpo_check_vnode_relabel_t)(struct ucred *cred,
57226ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
573ddcdf265SRobert Watson 		    struct label *newlabel);
5741d82b391SRobert Watson typedef int	(*mpo_check_vnode_rename_from_t)(struct ucred *cred,
57526ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
57626ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
577ddcdf265SRobert Watson 		    struct componentname *cnp);
5781d82b391SRobert Watson typedef int	(*mpo_check_vnode_rename_to_t)(struct ucred *cred,
57926ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
58026ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, int samedir,
5811d82b391SRobert Watson 		    struct componentname *cnp);
5821d82b391SRobert Watson typedef int	(*mpo_check_vnode_revoke_t)(struct ucred *cred,
58326ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
5841d82b391SRobert Watson typedef int	(*mpo_check_vnode_setacl_t)(struct ucred *cred,
58526ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, acl_type_t type,
586ddcdf265SRobert Watson 		    struct acl *acl);
5871d82b391SRobert Watson typedef int	(*mpo_check_vnode_setextattr_t)(struct ucred *cred,
58826ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
58926ae2b86SRobert Watson 		    int attrnamespace, const char *name, struct uio *uio);
5901d82b391SRobert Watson typedef int	(*mpo_check_vnode_setflags_t)(struct ucred *cred,
59126ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, u_long flags);
5921d82b391SRobert Watson typedef int	(*mpo_check_vnode_setmode_t)(struct ucred *cred,
59326ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, mode_t mode);
5941d82b391SRobert Watson typedef int	(*mpo_check_vnode_setowner_t)(struct ucred *cred,
59526ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, uid_t uid,
596ddcdf265SRobert Watson 		    gid_t gid);
5971d82b391SRobert Watson typedef int	(*mpo_check_vnode_setutimes_t)(struct ucred *cred,
59826ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
599ddcdf265SRobert Watson 		    struct timespec atime, struct timespec mtime);
6001d82b391SRobert Watson typedef int	(*mpo_check_vnode_stat_t)(struct ucred *active_cred,
601177142e4SRobert Watson 		    struct ucred *file_cred, struct vnode *vp,
60226ae2b86SRobert Watson 		    struct label *vplabel);
60345e0f3d6SRobert Watson typedef int	(*mpo_check_vnode_unlink_t)(struct ucred *cred,
60445e0f3d6SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
60545e0f3d6SRobert Watson 		    struct vnode *vp, struct label *vplabel,
60645e0f3d6SRobert Watson 		    struct componentname *cnp);
6071d82b391SRobert Watson typedef int	(*mpo_check_vnode_write_t)(struct ucred *active_cred,
608177142e4SRobert Watson 		    struct ucred *file_cred, struct vnode *vp,
60926ae2b86SRobert Watson 		    struct label *vplabel);
61014f212e2SRobert Watson typedef void	(*mpo_associate_nfsd_label_t)(struct ucred *cred);
611acd3428bSRobert Watson typedef int	(*mpo_priv_check_t)(struct ucred *cred, int priv);
612acd3428bSRobert Watson typedef int	(*mpo_priv_grant_t)(struct ucred *cred, int priv);
6131d82b391SRobert Watson 
6141d82b391SRobert Watson struct mac_policy_ops {
6151d82b391SRobert Watson 	/*
6161d82b391SRobert Watson 	 * Policy module operations.
6171d82b391SRobert Watson 	 */
6181d82b391SRobert Watson 	mpo_destroy_t				mpo_destroy;
6191d82b391SRobert Watson 	mpo_init_t				mpo_init;
6201d82b391SRobert Watson 
6211d82b391SRobert Watson 	/*
6221d82b391SRobert Watson 	 * General policy-directed security system call so that policies may
6231d82b391SRobert Watson 	 * implement new services without reserving explicit system call
6241d82b391SRobert Watson 	 * numbers.
6251d82b391SRobert Watson 	 */
6261d82b391SRobert Watson 	mpo_syscall_t				mpo_syscall;
6271d82b391SRobert Watson 
6281d82b391SRobert Watson 	/*
6291d82b391SRobert Watson 	 * Label operations.  Initialize label storage, destroy label
6301d82b391SRobert Watson 	 * storage, recycle for re-use without init/destroy, copy a label to
6311d82b391SRobert Watson 	 * initialized storage, and externalize/internalize from/to
6321d82b391SRobert Watson 	 * initialized storage.
6331d82b391SRobert Watson 	 */
6341d82b391SRobert Watson 	mpo_init_bpfdesc_label_t		mpo_init_bpfdesc_label;
6351d82b391SRobert Watson 	mpo_init_cred_label_t			mpo_init_cred_label;
63630575990SRobert Watson 	mpo_init_devfs_label_t			mpo_init_devfs_label;
6371d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder0;
6381d82b391SRobert Watson 	mpo_init_ifnet_label_t			mpo_init_ifnet_label;
6391d82b391SRobert Watson 	mpo_init_inpcb_label_t			mpo_init_inpcb_label;
6401d82b391SRobert Watson 	mpo_init_sysv_msgmsg_label_t		mpo_init_sysv_msgmsg_label;
6411d82b391SRobert Watson 	mpo_init_sysv_msgqueue_label_t		mpo_init_sysv_msgqueue_label;
6421d82b391SRobert Watson 	mpo_init_sysv_sem_label_t		mpo_init_sysv_sem_label;
6431d82b391SRobert Watson 	mpo_init_sysv_shm_label_t		mpo_init_sysv_shm_label;
6441d82b391SRobert Watson 	mpo_init_ipq_label_t			mpo_init_ipq_label;
6451d82b391SRobert Watson 	mpo_init_mbuf_label_t			mpo_init_mbuf_label;
6461d82b391SRobert Watson 	mpo_init_mount_label_t			mpo_init_mount_label;
6471d82b391SRobert Watson 	mpo_init_socket_label_t			mpo_init_socket_label;
6481d82b391SRobert Watson 	mpo_init_socket_peer_label_t		mpo_init_socket_peer_label;
6491d82b391SRobert Watson 	mpo_init_pipe_label_t			mpo_init_pipe_label;
6501d82b391SRobert Watson 	mpo_init_posix_sem_label_t		mpo_init_posix_sem_label;
6511d82b391SRobert Watson 	mpo_init_proc_label_t			mpo_init_proc_label;
6521d82b391SRobert Watson 	mpo_init_vnode_label_t			mpo_init_vnode_label;
6531d82b391SRobert Watson 	mpo_destroy_bpfdesc_label_t		mpo_destroy_bpfdesc_label;
6541d82b391SRobert Watson 	mpo_destroy_cred_label_t		mpo_destroy_cred_label;
65530575990SRobert Watson 	mpo_destroy_devfs_label_t		mpo_destroy_devfs_label;
6561d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder1;
6571d82b391SRobert Watson 	mpo_destroy_ifnet_label_t		mpo_destroy_ifnet_label;
6581d82b391SRobert Watson 	mpo_destroy_inpcb_label_t		mpo_destroy_inpcb_label;
6591d82b391SRobert Watson 	mpo_destroy_sysv_msgmsg_label_t		mpo_destroy_sysv_msgmsg_label;
6601d82b391SRobert Watson 	mpo_destroy_sysv_msgqueue_label_t	mpo_destroy_sysv_msgqueue_label;
6611d82b391SRobert Watson 	mpo_destroy_sysv_sem_label_t		mpo_destroy_sysv_sem_label;
6621d82b391SRobert Watson 	mpo_destroy_sysv_shm_label_t		mpo_destroy_sysv_shm_label;
6631d82b391SRobert Watson 	mpo_destroy_ipq_label_t			mpo_destroy_ipq_label;
6641d82b391SRobert Watson 	mpo_destroy_mbuf_label_t		mpo_destroy_mbuf_label;
6651d82b391SRobert Watson 	mpo_destroy_mount_label_t		mpo_destroy_mount_label;
6661d82b391SRobert Watson 	mpo_destroy_socket_label_t		mpo_destroy_socket_label;
6671d82b391SRobert Watson 	mpo_destroy_socket_peer_label_t		mpo_destroy_socket_peer_label;
6681d82b391SRobert Watson 	mpo_destroy_pipe_label_t		mpo_destroy_pipe_label;
6691d82b391SRobert Watson 	mpo_destroy_posix_sem_label_t		mpo_destroy_posix_sem_label;
6701d82b391SRobert Watson 	mpo_destroy_proc_label_t		mpo_destroy_proc_label;
6711d82b391SRobert Watson 	mpo_destroy_vnode_label_t		mpo_destroy_vnode_label;
6721d82b391SRobert Watson 	mpo_cleanup_sysv_msgmsg_t		mpo_cleanup_sysv_msgmsg;
6731d82b391SRobert Watson 	mpo_cleanup_sysv_msgqueue_t		mpo_cleanup_sysv_msgqueue;
6741d82b391SRobert Watson 	mpo_cleanup_sysv_sem_t			mpo_cleanup_sysv_sem;
6751d82b391SRobert Watson 	mpo_cleanup_sysv_shm_t			mpo_cleanup_sysv_shm;
6761d82b391SRobert Watson 	mpo_copy_cred_label_t			mpo_copy_cred_label;
6771d82b391SRobert Watson 	mpo_copy_ifnet_label_t			mpo_copy_ifnet_label;
6781d82b391SRobert Watson 	mpo_copy_mbuf_label_t			mpo_copy_mbuf_label;
6791d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder2;
6801d82b391SRobert Watson 	mpo_copy_pipe_label_t			mpo_copy_pipe_label;
6811d82b391SRobert Watson 	mpo_copy_socket_label_t			mpo_copy_socket_label;
6821d82b391SRobert Watson 	mpo_copy_vnode_label_t			mpo_copy_vnode_label;
6831d82b391SRobert Watson 	mpo_externalize_cred_label_t		mpo_externalize_cred_label;
6841d82b391SRobert Watson 	mpo_externalize_ifnet_label_t		mpo_externalize_ifnet_label;
6851d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder3;
6861d82b391SRobert Watson 	mpo_externalize_pipe_label_t		mpo_externalize_pipe_label;
6871d82b391SRobert Watson 	mpo_externalize_socket_label_t		mpo_externalize_socket_label;
6881d82b391SRobert Watson 	mpo_externalize_socket_peer_label_t	mpo_externalize_socket_peer_label;
6891d82b391SRobert Watson 	mpo_externalize_vnode_label_t		mpo_externalize_vnode_label;
6901d82b391SRobert Watson 	mpo_internalize_cred_label_t		mpo_internalize_cred_label;
6911d82b391SRobert Watson 	mpo_internalize_ifnet_label_t		mpo_internalize_ifnet_label;
6921d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder4;
6931d82b391SRobert Watson 	mpo_internalize_pipe_label_t		mpo_internalize_pipe_label;
6941d82b391SRobert Watson 	mpo_internalize_socket_label_t		mpo_internalize_socket_label;
6951d82b391SRobert Watson 	mpo_internalize_vnode_label_t		mpo_internalize_vnode_label;
6961d82b391SRobert Watson 
6971d82b391SRobert Watson 	/*
6981d82b391SRobert Watson 	 * Labeling event operations: file system objects, and things that
6991d82b391SRobert Watson 	 * look a lot like file system objects.
7001d82b391SRobert Watson 	 */
7011d82b391SRobert Watson 	mpo_associate_vnode_devfs_t		mpo_associate_vnode_devfs;
7021d82b391SRobert Watson 	mpo_associate_vnode_extattr_t		mpo_associate_vnode_extattr;
7031d82b391SRobert Watson 	mpo_associate_vnode_singlelabel_t	mpo_associate_vnode_singlelabel;
7041d82b391SRobert Watson 	mpo_create_devfs_device_t		mpo_create_devfs_device;
7051d82b391SRobert Watson 	mpo_create_devfs_directory_t		mpo_create_devfs_directory;
7061d82b391SRobert Watson 	mpo_create_devfs_symlink_t		mpo_create_devfs_symlink;
7071d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder5;
7081d82b391SRobert Watson 	mpo_create_vnode_extattr_t		mpo_create_vnode_extattr;
7091d82b391SRobert Watson 	mpo_create_mount_t			mpo_create_mount;
7101d82b391SRobert Watson 	mpo_relabel_vnode_t			mpo_relabel_vnode;
7111d82b391SRobert Watson 	mpo_setlabel_vnode_extattr_t		mpo_setlabel_vnode_extattr;
71230575990SRobert Watson 	mpo_update_devfs_t			mpo_update_devfs;
7131d82b391SRobert Watson 
7141d82b391SRobert Watson 	/*
7151d82b391SRobert Watson 	 * Labeling event operations: IPC objects.
7161d82b391SRobert Watson 	 */
7171d82b391SRobert Watson 	mpo_create_mbuf_from_socket_t		mpo_create_mbuf_from_socket;
7181d82b391SRobert Watson 	mpo_create_socket_t			mpo_create_socket;
7191d82b391SRobert Watson 	mpo_create_socket_from_socket_t		mpo_create_socket_from_socket;
7201d82b391SRobert Watson 	mpo_relabel_socket_t			mpo_relabel_socket;
7211d82b391SRobert Watson 	mpo_relabel_pipe_t			mpo_relabel_pipe;
7221d82b391SRobert Watson 	mpo_set_socket_peer_from_mbuf_t		mpo_set_socket_peer_from_mbuf;
7231d82b391SRobert Watson 	mpo_set_socket_peer_from_socket_t	mpo_set_socket_peer_from_socket;
7241d82b391SRobert Watson 	mpo_create_pipe_t			mpo_create_pipe;
7251d82b391SRobert Watson 
7261d82b391SRobert Watson 	/*
7271d82b391SRobert Watson 	 * Labeling event operations: System V IPC primitives.
7281d82b391SRobert Watson 	 */
7291d82b391SRobert Watson 	mpo_create_sysv_msgmsg_t		mpo_create_sysv_msgmsg;
7301d82b391SRobert Watson 	mpo_create_sysv_msgqueue_t		mpo_create_sysv_msgqueue;
7311d82b391SRobert Watson 	mpo_create_sysv_sem_t			mpo_create_sysv_sem;
7321d82b391SRobert Watson 	mpo_create_sysv_shm_t			mpo_create_sysv_shm;
7331d82b391SRobert Watson 
7341d82b391SRobert Watson 	/*
7351d82b391SRobert Watson 	 * Labeling event operations: POSIX (global/inter-process) semaphores.
7361d82b391SRobert Watson 	 */
7371d82b391SRobert Watson 	mpo_create_posix_sem_t			mpo_create_posix_sem;
7381d82b391SRobert Watson 
7391d82b391SRobert Watson 	/*
7401d82b391SRobert Watson 	 * Labeling event operations: network objects.
7411d82b391SRobert Watson 	 */
7421d82b391SRobert Watson 	mpo_create_bpfdesc_t			mpo_create_bpfdesc;
7431d82b391SRobert Watson 	mpo_create_ifnet_t			mpo_create_ifnet;
7441d82b391SRobert Watson 	mpo_create_inpcb_from_socket_t		mpo_create_inpcb_from_socket;
7451d82b391SRobert Watson 	mpo_create_ipq_t			mpo_create_ipq;
7461d82b391SRobert Watson 	mpo_create_datagram_from_ipq		mpo_create_datagram_from_ipq;
7471d82b391SRobert Watson 	mpo_create_fragment_t			mpo_create_fragment;
7481d82b391SRobert Watson 	mpo_create_mbuf_from_inpcb_t		mpo_create_mbuf_from_inpcb;
7491d82b391SRobert Watson 	mpo_create_mbuf_linklayer_t		mpo_create_mbuf_linklayer;
7501d82b391SRobert Watson 	mpo_create_mbuf_from_bpfdesc_t		mpo_create_mbuf_from_bpfdesc;
7511d82b391SRobert Watson 	mpo_create_mbuf_from_ifnet_t		mpo_create_mbuf_from_ifnet;
7521d82b391SRobert Watson 	mpo_create_mbuf_multicast_encap_t	mpo_create_mbuf_multicast_encap;
7531d82b391SRobert Watson 	mpo_create_mbuf_netlayer_t		mpo_create_mbuf_netlayer;
7541d82b391SRobert Watson 	mpo_fragment_match_t			mpo_fragment_match;
7551d82b391SRobert Watson 	mpo_reflect_mbuf_icmp_t			mpo_reflect_mbuf_icmp;
7561d82b391SRobert Watson 	mpo_reflect_mbuf_tcp_t			mpo_reflect_mbuf_tcp;
7571d82b391SRobert Watson 	mpo_relabel_ifnet_t			mpo_relabel_ifnet;
7581d82b391SRobert Watson 	mpo_update_ipq_t			mpo_update_ipq;
7591d82b391SRobert Watson 	mpo_inpcb_sosetlabel_t			mpo_inpcb_sosetlabel;
7601d82b391SRobert Watson 
7611d82b391SRobert Watson 	/*
7621d82b391SRobert Watson 	 * Labeling event operations: processes.
7631d82b391SRobert Watson 	 */
7641d82b391SRobert Watson 	mpo_execve_transition_t			mpo_execve_transition;
7651d82b391SRobert Watson 	mpo_execve_will_transition_t		mpo_execve_will_transition;
7661d82b391SRobert Watson 	mpo_create_proc0_t			mpo_create_proc0;
7671d82b391SRobert Watson 	mpo_create_proc1_t			mpo_create_proc1;
7681d82b391SRobert Watson 	mpo_relabel_cred_t			mpo_relabel_cred;
7691d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder6;
7701d82b391SRobert Watson 	mpo_thread_userret_t			mpo_thread_userret;
7711d82b391SRobert Watson 
7721d82b391SRobert Watson 	/*
7731d82b391SRobert Watson 	 * Access control checks.
7741d82b391SRobert Watson 	 */
7751d82b391SRobert Watson 	mpo_check_bpfdesc_receive_t		mpo_check_bpfdesc_receive;
7761d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder7;
7771d82b391SRobert Watson 	mpo_check_cred_relabel_t		mpo_check_cred_relabel;
7781d82b391SRobert Watson 	mpo_check_cred_visible_t		mpo_check_cred_visible;
7791d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder8;
7801d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder9;
7811d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder10;
7821d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder11;
7831d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder12;
7841d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder13;
7851d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder14;
7861d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder15;
7871d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder16;
7881d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder17;
7891d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder18;
7901d82b391SRobert Watson 	mpo_check_ifnet_relabel_t		mpo_check_ifnet_relabel;
7911d82b391SRobert Watson 	mpo_check_ifnet_transmit_t		mpo_check_ifnet_transmit;
7921d82b391SRobert Watson 	mpo_check_inpcb_deliver_t		mpo_check_inpcb_deliver;
7931d82b391SRobert Watson 	mpo_check_sysv_msgmsq_t			mpo_check_sysv_msgmsq;
7941d82b391SRobert Watson 	mpo_check_sysv_msgrcv_t			mpo_check_sysv_msgrcv;
7951d82b391SRobert Watson 	mpo_check_sysv_msgrmid_t		mpo_check_sysv_msgrmid;
7961d82b391SRobert Watson 	mpo_check_sysv_msqget_t			mpo_check_sysv_msqget;
7971d82b391SRobert Watson 	mpo_check_sysv_msqsnd_t			mpo_check_sysv_msqsnd;
7981d82b391SRobert Watson 	mpo_check_sysv_msqrcv_t			mpo_check_sysv_msqrcv;
7991d82b391SRobert Watson 	mpo_check_sysv_msqctl_t			mpo_check_sysv_msqctl;
8001d82b391SRobert Watson 	mpo_check_sysv_semctl_t			mpo_check_sysv_semctl;
8011d82b391SRobert Watson 	mpo_check_sysv_semget_t			mpo_check_sysv_semget;
8021d82b391SRobert Watson 	mpo_check_sysv_semop_t			mpo_check_sysv_semop;
8031d82b391SRobert Watson 	mpo_check_sysv_shmat_t			mpo_check_sysv_shmat;
8041d82b391SRobert Watson 	mpo_check_sysv_shmctl_t			mpo_check_sysv_shmctl;
8051d82b391SRobert Watson 	mpo_check_sysv_shmdt_t			mpo_check_sysv_shmdt;
8061d82b391SRobert Watson 	mpo_check_sysv_shmget_t			mpo_check_sysv_shmget;
8071d82b391SRobert Watson 	mpo_check_kenv_dump_t			mpo_check_kenv_dump;
8081d82b391SRobert Watson 	mpo_check_kenv_get_t			mpo_check_kenv_get;
8091d82b391SRobert Watson 	mpo_check_kenv_set_t			mpo_check_kenv_set;
8101d82b391SRobert Watson 	mpo_check_kenv_unset_t			mpo_check_kenv_unset;
8111d82b391SRobert Watson 	mpo_check_kld_load_t			mpo_check_kld_load;
8121d82b391SRobert Watson 	mpo_check_kld_stat_t			mpo_check_kld_stat;
8131d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder19;
8141d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder20;
8151d82b391SRobert Watson 	mpo_check_mount_stat_t			mpo_check_mount_stat;
8161d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder_21;
8171d82b391SRobert Watson 	mpo_check_pipe_ioctl_t			mpo_check_pipe_ioctl;
8181d82b391SRobert Watson 	mpo_check_pipe_poll_t			mpo_check_pipe_poll;
8191d82b391SRobert Watson 	mpo_check_pipe_read_t			mpo_check_pipe_read;
8201d82b391SRobert Watson 	mpo_check_pipe_relabel_t		mpo_check_pipe_relabel;
8211d82b391SRobert Watson 	mpo_check_pipe_stat_t			mpo_check_pipe_stat;
8221d82b391SRobert Watson 	mpo_check_pipe_write_t			mpo_check_pipe_write;
8231d82b391SRobert Watson 	mpo_check_posix_sem_destroy_t		mpo_check_posix_sem_destroy;
8241d82b391SRobert Watson 	mpo_check_posix_sem_getvalue_t		mpo_check_posix_sem_getvalue;
8251d82b391SRobert Watson 	mpo_check_posix_sem_open_t		mpo_check_posix_sem_open;
8261d82b391SRobert Watson 	mpo_check_posix_sem_post_t		mpo_check_posix_sem_post;
8271d82b391SRobert Watson 	mpo_check_posix_sem_unlink_t		mpo_check_posix_sem_unlink;
8281d82b391SRobert Watson 	mpo_check_posix_sem_wait_t		mpo_check_posix_sem_wait;
8291d82b391SRobert Watson 	mpo_check_proc_debug_t			mpo_check_proc_debug;
8301d82b391SRobert Watson 	mpo_check_proc_sched_t			mpo_check_proc_sched;
83118717f69SRobert Watson 	mpo_check_proc_setaudit_t		mpo_check_proc_setaudit;
832f1e8bf6dSRobert Watson 	mpo_check_proc_setaudit_addr_t		mpo_check_proc_setaudit_addr;
83318717f69SRobert Watson 	mpo_check_proc_setauid_t		mpo_check_proc_setauid;
8341d82b391SRobert Watson 	mpo_check_proc_setuid_t			mpo_check_proc_setuid;
8351d82b391SRobert Watson 	mpo_check_proc_seteuid_t		mpo_check_proc_seteuid;
8361d82b391SRobert Watson 	mpo_check_proc_setgid_t			mpo_check_proc_setgid;
8371d82b391SRobert Watson 	mpo_check_proc_setegid_t		mpo_check_proc_setegid;
8381d82b391SRobert Watson 	mpo_check_proc_setgroups_t		mpo_check_proc_setgroups;
8391d82b391SRobert Watson 	mpo_check_proc_setreuid_t		mpo_check_proc_setreuid;
8401d82b391SRobert Watson 	mpo_check_proc_setregid_t		mpo_check_proc_setregid;
8411d82b391SRobert Watson 	mpo_check_proc_setresuid_t		mpo_check_proc_setresuid;
8421d82b391SRobert Watson 	mpo_check_proc_setresgid_t		mpo_check_proc_setresgid;
8431d82b391SRobert Watson 	mpo_check_proc_signal_t			mpo_check_proc_signal;
8441d82b391SRobert Watson 	mpo_check_proc_wait_t			mpo_check_proc_wait;
8451d82b391SRobert Watson 	mpo_check_socket_accept_t		mpo_check_socket_accept;
8461d82b391SRobert Watson 	mpo_check_socket_bind_t			mpo_check_socket_bind;
8471d82b391SRobert Watson 	mpo_check_socket_connect_t		mpo_check_socket_connect;
8481d82b391SRobert Watson 	mpo_check_socket_create_t		mpo_check_socket_create;
8491d82b391SRobert Watson 	mpo_check_socket_deliver_t		mpo_check_socket_deliver;
8501d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder22;
8511d82b391SRobert Watson 	mpo_check_socket_listen_t		mpo_check_socket_listen;
8521d82b391SRobert Watson 	mpo_check_socket_poll_t			mpo_check_socket_poll;
8531d82b391SRobert Watson 	mpo_check_socket_receive_t		mpo_check_socket_receive;
8541d82b391SRobert Watson 	mpo_check_socket_relabel_t		mpo_check_socket_relabel;
8551d82b391SRobert Watson 	mpo_check_socket_send_t			mpo_check_socket_send;
8561d82b391SRobert Watson 	mpo_check_socket_stat_t			mpo_check_socket_stat;
8571d82b391SRobert Watson 	mpo_check_socket_visible_t		mpo_check_socket_visible;
8581d82b391SRobert Watson 	mpo_check_system_acct_t			mpo_check_system_acct;
85918717f69SRobert Watson 	mpo_check_system_audit_t		mpo_check_system_audit;
86018717f69SRobert Watson 	mpo_check_system_auditctl_t		mpo_check_system_auditctl;
86118717f69SRobert Watson 	mpo_check_system_auditon_t		mpo_check_system_auditon;
8621d82b391SRobert Watson 	mpo_check_system_reboot_t		mpo_check_system_reboot;
8631d82b391SRobert Watson 	mpo_check_system_swapon_t		mpo_check_system_swapon;
8641d82b391SRobert Watson 	mpo_check_system_swapoff_t		mpo_check_system_swapoff;
8651d82b391SRobert Watson 	mpo_check_system_sysctl_t		mpo_check_system_sysctl;
8661d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder23;
8671d82b391SRobert Watson 	mpo_check_vnode_access_t		mpo_check_vnode_access;
8681d82b391SRobert Watson 	mpo_check_vnode_chdir_t			mpo_check_vnode_chdir;
8691d82b391SRobert Watson 	mpo_check_vnode_chroot_t		mpo_check_vnode_chroot;
8701d82b391SRobert Watson 	mpo_check_vnode_create_t		mpo_check_vnode_create;
8711d82b391SRobert Watson 	mpo_check_vnode_deleteacl_t		mpo_check_vnode_deleteacl;
8721d82b391SRobert Watson 	mpo_check_vnode_deleteextattr_t		mpo_check_vnode_deleteextattr;
8731d82b391SRobert Watson 	mpo_check_vnode_exec_t			mpo_check_vnode_exec;
8741d82b391SRobert Watson 	mpo_check_vnode_getacl_t		mpo_check_vnode_getacl;
8751d82b391SRobert Watson 	mpo_check_vnode_getextattr_t		mpo_check_vnode_getextattr;
8761d82b391SRobert Watson 	mpo_placeholder_t			_mpo_placeholder24;
8771d82b391SRobert Watson 	mpo_check_vnode_link_t			mpo_check_vnode_link;
8781d82b391SRobert Watson 	mpo_check_vnode_listextattr_t		mpo_check_vnode_listextattr;
8791d82b391SRobert Watson 	mpo_check_vnode_lookup_t		mpo_check_vnode_lookup;
8801d82b391SRobert Watson 	mpo_check_vnode_mmap_t			mpo_check_vnode_mmap;
8811d82b391SRobert Watson 	mpo_check_vnode_mmap_downgrade_t	mpo_check_vnode_mmap_downgrade;
8821d82b391SRobert Watson 	mpo_check_vnode_mprotect_t		mpo_check_vnode_mprotect;
8831d82b391SRobert Watson 	mpo_check_vnode_open_t			mpo_check_vnode_open;
8841d82b391SRobert Watson 	mpo_check_vnode_poll_t			mpo_check_vnode_poll;
8851d82b391SRobert Watson 	mpo_check_vnode_read_t			mpo_check_vnode_read;
8861d82b391SRobert Watson 	mpo_check_vnode_readdir_t		mpo_check_vnode_readdir;
8871d82b391SRobert Watson 	mpo_check_vnode_readlink_t		mpo_check_vnode_readlink;
8881d82b391SRobert Watson 	mpo_check_vnode_relabel_t		mpo_check_vnode_relabel;
8891d82b391SRobert Watson 	mpo_check_vnode_rename_from_t		mpo_check_vnode_rename_from;
8901d82b391SRobert Watson 	mpo_check_vnode_rename_to_t		mpo_check_vnode_rename_to;
8911d82b391SRobert Watson 	mpo_check_vnode_revoke_t		mpo_check_vnode_revoke;
8921d82b391SRobert Watson 	mpo_check_vnode_setacl_t		mpo_check_vnode_setacl;
8931d82b391SRobert Watson 	mpo_check_vnode_setextattr_t		mpo_check_vnode_setextattr;
8941d82b391SRobert Watson 	mpo_check_vnode_setflags_t		mpo_check_vnode_setflags;
8951d82b391SRobert Watson 	mpo_check_vnode_setmode_t		mpo_check_vnode_setmode;
8961d82b391SRobert Watson 	mpo_check_vnode_setowner_t		mpo_check_vnode_setowner;
8971d82b391SRobert Watson 	mpo_check_vnode_setutimes_t		mpo_check_vnode_setutimes;
8981d82b391SRobert Watson 	mpo_check_vnode_stat_t			mpo_check_vnode_stat;
89945e0f3d6SRobert Watson 	mpo_check_vnode_unlink_t		mpo_check_vnode_unlink;
9001d82b391SRobert Watson 	mpo_check_vnode_write_t			mpo_check_vnode_write;
9011d82b391SRobert Watson 	mpo_associate_nfsd_label_t		mpo_associate_nfsd_label;
902d94f2a68SChristian S.J. Peron 	mpo_create_mbuf_from_firewall_t		mpo_create_mbuf_from_firewall;
903826cef3dSChristian S.J. Peron 	mpo_init_syncache_label_t		mpo_init_syncache_label;
904826cef3dSChristian S.J. Peron 	mpo_destroy_syncache_label_t		mpo_destroy_syncache_label;
905826cef3dSChristian S.J. Peron 	mpo_init_syncache_from_inpcb_t		mpo_init_syncache_from_inpcb;
906826cef3dSChristian S.J. Peron 	mpo_create_mbuf_from_syncache_t		mpo_create_mbuf_from_syncache;
907acd3428bSRobert Watson 	mpo_priv_check_t			mpo_priv_check;
908acd3428bSRobert Watson 	mpo_priv_grant_t			mpo_priv_grant;
909ddcdf265SRobert Watson };
910ddcdf265SRobert Watson 
9113459e1d2SRobert Watson /*
9123459e1d2SRobert Watson  * struct mac_policy_conf is the registration structure for policies, and is
9133459e1d2SRobert Watson  * provided to the MAC Framework using MAC_POLICY_SET() to invoke a SYSINIT
9143459e1d2SRobert Watson  * to register the policy.  In general, the fields are immutable, with the
9153459e1d2SRobert Watson  * exception of the "security field", run-time flags, and policy list entry,
9163459e1d2SRobert Watson  * which are managed by the MAC Framework.  Be careful when modifying this
9173459e1d2SRobert Watson  * structure, as its layout is statically compiled into all policies.
9183459e1d2SRobert Watson  */
919ddcdf265SRobert Watson struct mac_policy_conf {
920ddcdf265SRobert Watson 	char				*mpc_name;	/* policy name */
921ddcdf265SRobert Watson 	char				*mpc_fullname;	/* policy full name */
922ddcdf265SRobert Watson 	struct mac_policy_ops		*mpc_ops;	/* policy operations */
923ddcdf265SRobert Watson 	int				 mpc_loadtime_flags;	/* flags */
924ddcdf265SRobert Watson 	int				*mpc_field_off; /* security field */
925ddcdf265SRobert Watson 	int				 mpc_runtime_flags; /* flags */
926ddcdf265SRobert Watson 	LIST_ENTRY(mac_policy_conf)	 mpc_list;	/* global list */
927ddcdf265SRobert Watson };
928ddcdf265SRobert Watson 
929ddcdf265SRobert Watson /* Flags for the mpc_loadtime_flags field. */
930ddcdf265SRobert Watson #define	MPC_LOADTIME_FLAG_NOTLATE	0x00000001
931ddcdf265SRobert Watson #define	MPC_LOADTIME_FLAG_UNLOADOK	0x00000002
932225bff6fSRobert Watson #define	MPC_LOADTIME_FLAG_LABELMBUFS	0x00000004
933ddcdf265SRobert Watson 
934ddcdf265SRobert Watson /* Flags for the mpc_runtime_flags field. */
935ddcdf265SRobert Watson #define	MPC_RUNTIME_FLAG_REGISTERED	0x00000001
936ddcdf265SRobert Watson 
937be23ba9aSRobert Watson /*-
938be23ba9aSRobert Watson  * The TrustedBSD MAC Framework has a major version number, MAC_VERSION,
939be23ba9aSRobert Watson  * which defines the ABI of the Framework present in the kernel (and depended
940be23ba9aSRobert Watson  * on by policy modules compiled against that kernel).  Currently,
941be23ba9aSRobert Watson  * MAC_POLICY_SET() requires that the kernel and module ABI version numbers
942be23ba9aSRobert Watson  * exactly match.  The following major versions have been defined to date:
943be23ba9aSRobert Watson  *
944be23ba9aSRobert Watson  *   MAC version             FreeBSD versions
945be23ba9aSRobert Watson  *   1                       5.x
946be23ba9aSRobert Watson  *   2                       6.x
947be23ba9aSRobert Watson  *   3                       7.x
948be23ba9aSRobert Watson  */
949be23ba9aSRobert Watson #define	MAC_VERSION	3
950be23ba9aSRobert Watson 
9515c8dd342SRobert Watson #define	MAC_POLICY_SET(mpops, mpname, mpfullname, mpflags, privdata_wanted) \
952ddcdf265SRobert Watson 	static struct mac_policy_conf mpname##_mac_policy_conf = {	\
953ddcdf265SRobert Watson 		#mpname,						\
954ddcdf265SRobert Watson 		mpfullname,						\
9555c8dd342SRobert Watson 		mpops,							\
956ddcdf265SRobert Watson 		mpflags,						\
957ddcdf265SRobert Watson 		privdata_wanted,					\
958ddcdf265SRobert Watson 		0,							\
959ddcdf265SRobert Watson 	};								\
960ddcdf265SRobert Watson 	static moduledata_t mpname##_mod = {				\
961ddcdf265SRobert Watson 		#mpname,						\
962ddcdf265SRobert Watson 		mac_policy_modevent,					\
963ddcdf265SRobert Watson 		&mpname##_mac_policy_conf				\
964ddcdf265SRobert Watson 	};								\
965be23ba9aSRobert Watson 	MODULE_DEPEND(mpname, kernel_mac_support, MAC_VERSION,		\
966be23ba9aSRobert Watson 	    MAC_VERSION, MAC_VERSION);					\
967ddcdf265SRobert Watson 	DECLARE_MODULE(mpname, mpname##_mod, SI_SUB_MAC_POLICY,		\
968ddcdf265SRobert Watson 	    SI_ORDER_MIDDLE)
969ddcdf265SRobert Watson 
970ddcdf265SRobert Watson int	mac_policy_modevent(module_t mod, int type, void *data);
971ddcdf265SRobert Watson 
9728425ae12SRobert Watson /*
9738425ae12SRobert Watson  * Policy interface to map a struct label pointer to per-policy data.
9748425ae12SRobert Watson  * Typically, policies wrap this in their own accessor macro that casts a
9750142affcSRobert Watson  * uintptr_t to a policy-specific data type.
9768425ae12SRobert Watson  */
9770142affcSRobert Watson intptr_t	mac_label_get(struct label *l, int slot);
9780142affcSRobert Watson void		mac_label_set(struct label *l, int slot, intptr_t v);
979ddcdf265SRobert Watson 
980d02188c1SRobert Watson #endif /* !_SYS_SECURITY_MAC_MAC_POLICY_H_ */
981