xref: /freebsd/sys/security/mac/mac_policy.h (revision 50315501340cc3ca1a565c4f9700bbadcdaa5c01)
1ddcdf265SRobert Watson /*-
29b6dd12eSRobert Watson  * Copyright (c) 1999-2002, 2007-2011 Robert N. M. Watson
37f53207bSRobert Watson  * Copyright (c) 2001-2005 Networks Associates Technology, Inc.
41d82b391SRobert Watson  * Copyright (c) 2005-2006 SPARTA, Inc.
56356dba0SRobert Watson  * Copyright (c) 2008 Apple Inc.
6ddcdf265SRobert Watson  * All rights reserved.
7ddcdf265SRobert Watson  *
8ddcdf265SRobert Watson  * This software was developed by Robert Watson for the TrustedBSD Project.
9ddcdf265SRobert Watson  *
106201265bSRobert Watson  * This software was developed for the FreeBSD Project in part by Network
116201265bSRobert Watson  * Associates Laboratories, the Security Research Division of Network
126201265bSRobert Watson  * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"),
136201265bSRobert Watson  * as part of the DARPA CHATS research program.
14ddcdf265SRobert Watson  *
15d26dd2d9SRobert Watson  * This software was enhanced by SPARTA ISSO under SPAWAR contract
16d26dd2d9SRobert Watson  * N66001-04-C-6019 ("SEFOS").
17d26dd2d9SRobert Watson  *
186f6174a7SRobert Watson  * This software was developed at the University of Cambridge Computer
196f6174a7SRobert Watson  * Laboratory with support from a grant from Google, Inc.
206f6174a7SRobert Watson  *
21ddcdf265SRobert Watson  * Redistribution and use in source and binary forms, with or without
22ddcdf265SRobert Watson  * modification, are permitted provided that the following conditions
23ddcdf265SRobert Watson  * are met:
24ddcdf265SRobert Watson  * 1. Redistributions of source code must retain the above copyright
25ddcdf265SRobert Watson  *    notice, this list of conditions and the following disclaimer.
26ddcdf265SRobert Watson  * 2. Redistributions in binary form must reproduce the above copyright
27ddcdf265SRobert Watson  *    notice, this list of conditions and the following disclaimer in the
28ddcdf265SRobert Watson  *    documentation and/or other materials provided with the distribution.
29ddcdf265SRobert Watson  *
30ddcdf265SRobert Watson  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
31ddcdf265SRobert Watson  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
32ddcdf265SRobert Watson  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
33ddcdf265SRobert Watson  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
34ddcdf265SRobert Watson  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
35ddcdf265SRobert Watson  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
36ddcdf265SRobert Watson  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
37ddcdf265SRobert Watson  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
38ddcdf265SRobert Watson  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
39ddcdf265SRobert Watson  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
40ddcdf265SRobert Watson  * SUCH DAMAGE.
41ddcdf265SRobert Watson  *
42ddcdf265SRobert Watson  * $FreeBSD$
43ddcdf265SRobert Watson  */
44ddcdf265SRobert Watson /*
45ddcdf265SRobert Watson  * Kernel interface for MAC policy modules.
46ddcdf265SRobert Watson  */
47646a9f80SRobert Watson #ifndef _SECURITY_MAC_MAC_POLICY_H_
48646a9f80SRobert Watson #define	_SECURITY_MAC_MAC_POLICY_H_
49ddcdf265SRobert Watson 
50c96ae196SRobert Watson #ifndef _KERNEL
51c96ae196SRobert Watson #error "no user-serviceable parts inside"
52c96ae196SRobert Watson #endif
53c96ae196SRobert Watson 
54ddcdf265SRobert Watson /*-
55ddcdf265SRobert Watson  * Pluggable access control policy definition structure.
56ddcdf265SRobert Watson  *
576baacecdSRobert Watson  * List of operations that are performed as part of the implementation of a
586baacecdSRobert Watson  * MAC policy.  Policy implementors declare operations with a mac_policy_ops
596baacecdSRobert Watson  * structure, and using the MAC_POLICY_SET() macro.  If an entry point is not
606baacecdSRobert Watson  * declared, then then the policy will be ignored during evaluation of that
616baacecdSRobert Watson  * event or check.
62ddcdf265SRobert Watson  *
63ddcdf265SRobert Watson  * Operations are sorted first by general class of operation, then
64ddcdf265SRobert Watson  * alphabetically.
65ddcdf265SRobert Watson  */
66aed55708SRobert Watson #include <sys/acl.h>	/* XXX acl_type_t */
6715bc6b2bSEdward Tomasz Napierala #include <sys/types.h>	/* XXX accmode_t */
68aed55708SRobert Watson 
692449b9e5SMitchell Horne #include <ddb/ddb.h>	/* XXX db_expr_t */
702449b9e5SMitchell Horne 
7116fd30bdSRobert Watson struct acl;
7218717f69SRobert Watson struct auditinfo;
73343cc83eSPeter Wemm struct auditinfo_addr;
74f47cb886SRobert Watson struct bpf_d;
7517451386SRobert Watson struct cdev;
7616fd30bdSRobert Watson struct componentname;
772449b9e5SMitchell Horne struct db_command;
7816fd30bdSRobert Watson struct devfs_dirent;
79f47cb886SRobert Watson struct ifnet;
80f47cb886SRobert Watson struct image_params;
81a557af22SRobert Watson struct inpcb;
824b908c8bSRobert Watson struct ip6q;
8316fd30bdSRobert Watson struct ipq;
842449b9e5SMitchell Horne struct kdb_dbbe;
8552648411SRobert Watson struct ksem;
8616fd30bdSRobert Watson struct label;
87ddcdf265SRobert Watson struct mac_policy_conf;
8816fd30bdSRobert Watson struct mbuf;
8916fd30bdSRobert Watson struct mount;
90198e7d90SRobert Watson struct msg;
9142726d8aSRobert Watson struct msqid_kernel;
924795b82cSRobert Watson struct pipepair;
93f97e834bSRobert Watson struct proc;
94f51e5803SRobert Watson struct sbuf;
9542726d8aSRobert Watson struct semid_kernel;
968e38aeffSJohn Baldwin struct shmfd;
9742726d8aSRobert Watson struct shmid_kernel;
98f97e834bSRobert Watson struct sockaddr;
9916fd30bdSRobert Watson struct socket;
10063dba32bSPawel Jakub Dawidek struct sysctl_oid;
10163dba32bSPawel Jakub Dawidek struct sysctl_req;
102f97e834bSRobert Watson struct thread;
10316fd30bdSRobert Watson struct ucred;
104f47cb886SRobert Watson struct vattr;
10516fd30bdSRobert Watson struct vnode;
1061d82b391SRobert Watson 
107ddcdf265SRobert Watson /*
108ddcdf265SRobert Watson  * Policy module operations.
109ddcdf265SRobert Watson  */
1101d82b391SRobert Watson typedef void	(*mpo_destroy_t)(struct mac_policy_conf *mpc);
1111d82b391SRobert Watson typedef void	(*mpo_init_t)(struct mac_policy_conf *mpc);
112ddcdf265SRobert Watson 
113ddcdf265SRobert Watson /*
1143459e1d2SRobert Watson  * General policy-directed security system call so that policies may
1156baacecdSRobert Watson  * implement new services without reserving explicit system call numbers.
11627f2eac7SRobert Watson  */
1171d82b391SRobert Watson typedef int	(*mpo_syscall_t)(struct thread *td, int call, void *arg);
1181d82b391SRobert Watson 
1191d82b391SRobert Watson /*
1201d82b391SRobert Watson  * Place-holder function pointers for ABI-compatibility purposes.
1211d82b391SRobert Watson  */
1221d82b391SRobert Watson typedef void	(*mpo_placeholder_t)(void);
12327f2eac7SRobert Watson 
12427f2eac7SRobert Watson /*
125179da74eSRobert Watson  * Operations sorted alphabetically by primary object type and then method.
126ddcdf265SRobert Watson  */
127179da74eSRobert Watson typedef	int	(*mpo_bpfdesc_check_receive_t)(struct bpf_d *d,
128179da74eSRobert Watson 		    struct label *dlabel, struct ifnet *ifp,
129179da74eSRobert Watson 		    struct label *ifplabel);
130179da74eSRobert Watson typedef void	(*mpo_bpfdesc_create_t)(struct ucred *cred,
131179da74eSRobert Watson 		    struct bpf_d *d, struct label *dlabel);
132179da74eSRobert Watson typedef void	(*mpo_bpfdesc_create_mbuf_t)(struct bpf_d *d,
133179da74eSRobert Watson 		    struct label *dlabel, struct mbuf *m,
134179da74eSRobert Watson 		    struct label *mlabel);
13530d239bcSRobert Watson typedef void	(*mpo_bpfdesc_destroy_label_t)(struct label *label);
136179da74eSRobert Watson typedef void	(*mpo_bpfdesc_init_label_t)(struct label *label);
137179da74eSRobert Watson 
138212ab0cfSRobert Watson typedef void	(*mpo_cred_associate_nfsd_t)(struct ucred *cred);
139179da74eSRobert Watson typedef int	(*mpo_cred_check_relabel_t)(struct ucred *cred,
140179da74eSRobert Watson 		    struct label *newlabel);
1416f6174a7SRobert Watson typedef int	(*mpo_cred_check_setaudit_t)(struct ucred *cred,
1426f6174a7SRobert Watson 		    struct auditinfo *ai);
1436f6174a7SRobert Watson typedef int	(*mpo_cred_check_setaudit_addr_t)(struct ucred *cred,
1446f6174a7SRobert Watson 		    struct auditinfo_addr *aia);
1456f6174a7SRobert Watson typedef int	(*mpo_cred_check_setauid_t)(struct ucred *cred, uid_t auid);
1466f6174a7SRobert Watson typedef int	(*mpo_cred_check_setegid_t)(struct ucred *cred, gid_t egid);
1476f6174a7SRobert Watson typedef int	(*mpo_cred_check_seteuid_t)(struct ucred *cred, uid_t euid);
1486f6174a7SRobert Watson typedef int	(*mpo_cred_check_setgid_t)(struct ucred *cred, gid_t gid);
1496f6174a7SRobert Watson typedef int	(*mpo_cred_check_setgroups_t)(struct ucred *cred, int ngroups,
1506f6174a7SRobert Watson 		    gid_t *gidset);
1516f6174a7SRobert Watson typedef int	(*mpo_cred_check_setregid_t)(struct ucred *cred, gid_t rgid,
1526f6174a7SRobert Watson 		    gid_t egid);
1536f6174a7SRobert Watson typedef int	(*mpo_cred_check_setresgid_t)(struct ucred *cred, gid_t rgid,
1546f6174a7SRobert Watson 		    gid_t egid, gid_t sgid);
1556f6174a7SRobert Watson typedef int	(*mpo_cred_check_setresuid_t)(struct ucred *cred, uid_t ruid,
1566f6174a7SRobert Watson 		    uid_t euid, uid_t suid);
1576f6174a7SRobert Watson typedef int	(*mpo_cred_check_setreuid_t)(struct ucred *cred, uid_t ruid,
1586f6174a7SRobert Watson 		    uid_t euid);
1596f6174a7SRobert Watson typedef int	(*mpo_cred_check_setuid_t)(struct ucred *cred, uid_t uid);
160179da74eSRobert Watson typedef int	(*mpo_cred_check_visible_t)(struct ucred *cr1,
161179da74eSRobert Watson 		    struct ucred *cr2);
16230d239bcSRobert Watson typedef void	(*mpo_cred_copy_label_t)(struct label *src,
16356d9e932SRobert Watson 		    struct label *dest);
164212ab0cfSRobert Watson typedef void	(*mpo_cred_create_init_t)(struct ucred *cred);
165212ab0cfSRobert Watson typedef void	(*mpo_cred_create_swapper_t)(struct ucred *cred);
166179da74eSRobert Watson typedef void	(*mpo_cred_destroy_label_t)(struct label *label);
16730d239bcSRobert Watson typedef int	(*mpo_cred_externalize_label_t)(struct label *label,
168f51e5803SRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
169179da74eSRobert Watson typedef void	(*mpo_cred_init_label_t)(struct label *label);
17030d239bcSRobert Watson typedef int	(*mpo_cred_internalize_label_t)(struct label *label,
171475b9d0aSRobert Watson 		    char *element_name, char *element_data, int *claimed);
172179da74eSRobert Watson typedef void	(*mpo_cred_relabel_t)(struct ucred *cred,
173179da74eSRobert Watson 		    struct label *newlabel);
174ddcdf265SRobert Watson 
1752449b9e5SMitchell Horne typedef int	(*mpo_ddb_command_register_t)(struct db_command_table *table,
1762449b9e5SMitchell Horne 		    struct db_command *cmd);
1772449b9e5SMitchell Horne typedef int	(*mpo_ddb_command_exec_t)(struct db_command *cmd,
1782449b9e5SMitchell Horne 		    db_expr_t addr, bool have_addr, db_expr_t count,
1792449b9e5SMitchell Horne 		    char *modif);
1802449b9e5SMitchell Horne 
18130d239bcSRobert Watson typedef void	(*mpo_devfs_create_device_t)(struct ucred *cred,
182d26dd2d9SRobert Watson 		    struct mount *mp, struct cdev *dev,
18326ae2b86SRobert Watson 		    struct devfs_dirent *de, struct label *delabel);
18430d239bcSRobert Watson typedef void	(*mpo_devfs_create_directory_t)(struct mount *mp,
1851d82b391SRobert Watson 		    char *dirname, int dirnamelen, struct devfs_dirent *de,
18626ae2b86SRobert Watson 		    struct label *delabel);
18730d239bcSRobert Watson typedef void	(*mpo_devfs_create_symlink_t)(struct ucred *cred,
188990b4b2dSRobert Watson 		    struct mount *mp, struct devfs_dirent *dd,
189990b4b2dSRobert Watson 		    struct label *ddlabel, struct devfs_dirent *de,
190990b4b2dSRobert Watson 		    struct label *delabel);
191179da74eSRobert Watson typedef void	(*mpo_devfs_destroy_label_t)(struct label *label);
192179da74eSRobert Watson typedef void	(*mpo_devfs_init_label_t)(struct label *label);
19330d239bcSRobert Watson typedef void	(*mpo_devfs_update_t)(struct mount *mp,
19426ae2b86SRobert Watson 		    struct devfs_dirent *de, struct label *delabel,
19526ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
196179da74eSRobert Watson typedef void	(*mpo_devfs_vnode_associate_t)(struct mount *mp,
197179da74eSRobert Watson 		    struct label *mplabel, struct devfs_dirent *de,
198179da74eSRobert Watson 		    struct label *delabel, struct vnode *vp,
199179da74eSRobert Watson 		    struct label *vplabel);
200ddcdf265SRobert Watson 
201179da74eSRobert Watson typedef int	(*mpo_ifnet_check_relabel_t)(struct ucred *cred,
202179da74eSRobert Watson 		    struct ifnet *ifp, struct label *ifplabel,
203179da74eSRobert Watson 		    struct label *newlabel);
204179da74eSRobert Watson typedef int	(*mpo_ifnet_check_transmit_t)(struct ifnet *ifp,
205179da74eSRobert Watson 		    struct label *ifplabel, struct mbuf *m,
20626ae2b86SRobert Watson 		    struct label *mlabel);
207179da74eSRobert Watson typedef void	(*mpo_ifnet_copy_label_t)(struct label *src,
208179da74eSRobert Watson 		    struct label *dest);
20930d239bcSRobert Watson typedef void	(*mpo_ifnet_create_t)(struct ifnet *ifp,
21026ae2b86SRobert Watson 		    struct label *ifplabel);
211179da74eSRobert Watson typedef void	(*mpo_ifnet_create_mbuf_t)(struct ifnet *ifp,
212179da74eSRobert Watson 		    struct label *ifplabel, struct mbuf *m,
213179da74eSRobert Watson 		    struct label *mlabel);
214179da74eSRobert Watson typedef void	(*mpo_ifnet_destroy_label_t)(struct label *label);
215179da74eSRobert Watson typedef int	(*mpo_ifnet_externalize_label_t)(struct label *label,
216179da74eSRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
217179da74eSRobert Watson typedef void	(*mpo_ifnet_init_label_t)(struct label *label);
218179da74eSRobert Watson typedef int	(*mpo_ifnet_internalize_label_t)(struct label *label,
219179da74eSRobert Watson 		    char *element_name, char *element_data, int *claimed);
220179da74eSRobert Watson typedef void	(*mpo_ifnet_relabel_t)(struct ucred *cred, struct ifnet *ifp,
221179da74eSRobert Watson 		    struct label *ifplabel, struct label *newlabel);
222179da74eSRobert Watson 
223179da74eSRobert Watson typedef int	(*mpo_inpcb_check_deliver_t)(struct inpcb *inp,
224179da74eSRobert Watson 		    struct label *inplabel, struct mbuf *m,
225179da74eSRobert Watson 		    struct label *mlabel);
22637ee7293SBjoern A. Zeeb typedef int	(*mpo_inpcb_check_visible_t)(struct ucred *cred,
22737ee7293SBjoern A. Zeeb 		    struct inpcb *inp, struct label *inplabel);
22830d239bcSRobert Watson typedef void	(*mpo_inpcb_create_t)(struct socket *so,
229a557af22SRobert Watson 		    struct label *solabel, struct inpcb *inp,
230a557af22SRobert Watson 		    struct label *inplabel);
23130d239bcSRobert Watson typedef void	(*mpo_inpcb_create_mbuf_t)(struct inpcb *inp,
2322d92ec98SRobert Watson 		    struct label *inplabel, struct mbuf *m,
2332d92ec98SRobert Watson 		    struct label *mlabel);
234179da74eSRobert Watson typedef void	(*mpo_inpcb_destroy_label_t)(struct label *label);
235179da74eSRobert Watson typedef int	(*mpo_inpcb_init_label_t)(struct label *label, int flag);
236179da74eSRobert Watson typedef void	(*mpo_inpcb_sosetlabel_t)(struct socket *so,
237179da74eSRobert Watson 		    struct label *label, struct inpcb *inp,
238179da74eSRobert Watson 		    struct label *inplabel);
239179da74eSRobert Watson 
2404b908c8bSRobert Watson typedef void	(*mpo_ip6q_create_t)(struct mbuf *m, struct label *mlabel,
2414b908c8bSRobert Watson 		    struct ip6q *q6, struct label *q6label);
2424b908c8bSRobert Watson typedef void	(*mpo_ip6q_destroy_label_t)(struct label *label);
2434b908c8bSRobert Watson typedef int	(*mpo_ip6q_init_label_t)(struct label *label, int flag);
2444b908c8bSRobert Watson typedef int	(*mpo_ip6q_match_t)(struct mbuf *m, struct label *mlabel,
2454b908c8bSRobert Watson 		    struct ip6q *q6, struct label *q6label);
2464b908c8bSRobert Watson typedef void	(*mpo_ip6q_reassemble)(struct ip6q *q6, struct label *q6label,
2474b908c8bSRobert Watson 		    struct mbuf *m, struct label *mlabel);
2484b908c8bSRobert Watson typedef void	(*mpo_ip6q_update_t)(struct mbuf *m, struct label *mlabel,
2494b908c8bSRobert Watson 		    struct ip6q *q6, struct label *q6label);
2504b908c8bSRobert Watson 
251179da74eSRobert Watson typedef void	(*mpo_ipq_create_t)(struct mbuf *m, struct label *mlabel,
25237f44cb4SRobert Watson 		    struct ipq *q, struct label *qlabel);
253179da74eSRobert Watson typedef void	(*mpo_ipq_destroy_label_t)(struct label *label);
254179da74eSRobert Watson typedef int	(*mpo_ipq_init_label_t)(struct label *label, int flag);
255179da74eSRobert Watson typedef int	(*mpo_ipq_match_t)(struct mbuf *m, struct label *mlabel,
25637f44cb4SRobert Watson 		    struct ipq *q, struct label *qlabel);
25737f44cb4SRobert Watson typedef void	(*mpo_ipq_reassemble)(struct ipq *q, struct label *qlabel,
25837f44cb4SRobert Watson 		    struct mbuf *m, struct label *mlabel);
259179da74eSRobert Watson typedef void	(*mpo_ipq_update_t)(struct mbuf *m, struct label *mlabel,
26037f44cb4SRobert Watson 		    struct ipq *q, struct label *qlabel);
261179da74eSRobert Watson 
2622449b9e5SMitchell Horne typedef int	(*mpo_kdb_check_backend_t)(struct kdb_dbbe *be);
2632449b9e5SMitchell Horne 
264179da74eSRobert Watson typedef int	(*mpo_kenv_check_dump_t)(struct ucred *cred);
265179da74eSRobert Watson typedef int	(*mpo_kenv_check_get_t)(struct ucred *cred, char *name);
266179da74eSRobert Watson typedef int	(*mpo_kenv_check_set_t)(struct ucred *cred, char *name,
267179da74eSRobert Watson 		    char *value);
268179da74eSRobert Watson typedef int	(*mpo_kenv_check_unset_t)(struct ucred *cred, char *name);
269179da74eSRobert Watson 
270179da74eSRobert Watson typedef int	(*mpo_kld_check_load_t)(struct ucred *cred, struct vnode *vp,
271179da74eSRobert Watson 		    struct label *vplabel);
272179da74eSRobert Watson typedef int	(*mpo_kld_check_stat_t)(struct ucred *cred);
273179da74eSRobert Watson 
274179da74eSRobert Watson typedef void	(*mpo_mbuf_copy_label_t)(struct label *src,
275179da74eSRobert Watson 		    struct label *dest);
276179da74eSRobert Watson typedef void	(*mpo_mbuf_destroy_label_t)(struct label *label);
277179da74eSRobert Watson typedef int	(*mpo_mbuf_init_label_t)(struct label *label, int flag);
278179da74eSRobert Watson 
279179da74eSRobert Watson typedef int	(*mpo_mount_check_stat_t)(struct ucred *cred,
280179da74eSRobert Watson 		    struct mount *mp, struct label *mplabel);
281179da74eSRobert Watson typedef void	(*mpo_mount_create_t)(struct ucred *cred, struct mount *mp,
282179da74eSRobert Watson 		    struct label *mplabel);
283179da74eSRobert Watson typedef void	(*mpo_mount_destroy_label_t)(struct label *label);
284179da74eSRobert Watson typedef void	(*mpo_mount_init_label_t)(struct label *label);
285179da74eSRobert Watson 
286b9b0dac3SRobert Watson typedef void	(*mpo_netinet_arp_send_t)(struct ifnet *ifp,
287b9b0dac3SRobert Watson 		    struct label *ifplabel, struct mbuf *m,
288b9b0dac3SRobert Watson 		    struct label *mlabel);
289a13e21f7SRobert Watson typedef void	(*mpo_netinet_firewall_reply_t)(struct mbuf *mrecv,
290a13e21f7SRobert Watson 		    struct label *mrecvlabel, struct mbuf *msend,
291a13e21f7SRobert Watson 		    struct label *msendlabel);
29286407646SRobert Watson typedef	void	(*mpo_netinet_firewall_send_t)(struct mbuf *m,
29386407646SRobert Watson 		    struct label *mlabel);
294179da74eSRobert Watson typedef void	(*mpo_netinet_fragment_t)(struct mbuf *m,
295179da74eSRobert Watson 		    struct label *mlabel, struct mbuf *frag,
296179da74eSRobert Watson 		    struct label *fraglabel);
297a13e21f7SRobert Watson typedef void	(*mpo_netinet_icmp_reply_t)(struct mbuf *mrecv,
298a13e21f7SRobert Watson 		    struct label *mrecvlabel, struct mbuf *msend,
299a13e21f7SRobert Watson 		    struct label *msendlabel);
300a13e21f7SRobert Watson typedef void	(*mpo_netinet_icmp_replyinplace_t)(struct mbuf *m,
301eb8c7f99SRobert Watson 		    struct label *mlabel);
302b9b0dac3SRobert Watson typedef void	(*mpo_netinet_igmp_send_t)(struct ifnet *ifp,
303b9b0dac3SRobert Watson 		    struct label *ifplabel, struct mbuf *m,
304b9b0dac3SRobert Watson 		    struct label *mlabel);
30530d239bcSRobert Watson typedef void	(*mpo_netinet_tcp_reply_t)(struct mbuf *m,
3061d82b391SRobert Watson 		    struct label *mlabel);
307ddcdf265SRobert Watson 
308b9b0dac3SRobert Watson typedef void	(*mpo_netinet6_nd6_send_t)(struct ifnet *ifp,
309b9b0dac3SRobert Watson 		    struct label *ifplabel, struct mbuf *m,
310b9b0dac3SRobert Watson 		    struct label *mlabel);
311b9b0dac3SRobert Watson 
31230d239bcSRobert Watson typedef int	(*mpo_pipe_check_ioctl_t)(struct ucred *cred,
31326ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel,
3144795b82cSRobert Watson 		    unsigned long cmd, void *data);
31530d239bcSRobert Watson typedef int	(*mpo_pipe_check_poll_t)(struct ucred *cred,
31626ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel);
31730d239bcSRobert Watson typedef int	(*mpo_pipe_check_read_t)(struct ucred *cred,
31826ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel);
31930d239bcSRobert Watson typedef int	(*mpo_pipe_check_relabel_t)(struct ucred *cred,
32026ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel,
321ddcdf265SRobert Watson 		    struct label *newlabel);
32230d239bcSRobert Watson typedef int	(*mpo_pipe_check_stat_t)(struct ucred *cred,
32326ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel);
32430d239bcSRobert Watson typedef int	(*mpo_pipe_check_write_t)(struct ucred *cred,
32526ae2b86SRobert Watson 		    struct pipepair *pp, struct label *pplabel);
326179da74eSRobert Watson typedef void	(*mpo_pipe_copy_label_t)(struct label *src,
327179da74eSRobert Watson 		    struct label *dest);
328179da74eSRobert Watson typedef void	(*mpo_pipe_create_t)(struct ucred *cred, struct pipepair *pp,
329179da74eSRobert Watson 		    struct label *pplabel);
330179da74eSRobert Watson typedef void	(*mpo_pipe_destroy_label_t)(struct label *label);
331179da74eSRobert Watson typedef int	(*mpo_pipe_externalize_label_t)(struct label *label,
332179da74eSRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
333179da74eSRobert Watson typedef void	(*mpo_pipe_init_label_t)(struct label *label);
334179da74eSRobert Watson typedef int	(*mpo_pipe_internalize_label_t)(struct label *label,
335179da74eSRobert Watson 		    char *element_name, char *element_data, int *claimed);
336179da74eSRobert Watson typedef void	(*mpo_pipe_relabel_t)(struct ucred *cred, struct pipepair *pp,
337179da74eSRobert Watson 		    struct label *oldlabel, struct label *newlabel);
338179da74eSRobert Watson 
3396bc1e9cdSJohn Baldwin typedef int	(*mpo_posixsem_check_getvalue_t)(struct ucred *active_cred,
3406bc1e9cdSJohn Baldwin 		    struct ucred *file_cred, struct ksem *ks,
3416bc1e9cdSJohn Baldwin 		    struct label *kslabel);
34230d239bcSRobert Watson typedef int	(*mpo_posixsem_check_open_t)(struct ucred *cred,
343fe09513eSRobert Watson 		    struct ksem *ks, struct label *kslabel);
3446bc1e9cdSJohn Baldwin typedef int	(*mpo_posixsem_check_post_t)(struct ucred *active_cred,
3456bc1e9cdSJohn Baldwin 		    struct ucred *file_cred, struct ksem *ks,
3466bc1e9cdSJohn Baldwin 		    struct label *kslabel);
3479c00bb91SKonstantin Belousov typedef int	(*mpo_posixsem_check_setmode_t)(struct ucred *cred,
3489c00bb91SKonstantin Belousov 		    struct ksem *ks, struct label *shmlabel,
3499c00bb91SKonstantin Belousov 		    mode_t mode);
3509c00bb91SKonstantin Belousov typedef int	(*mpo_posixsem_check_setowner_t)(struct ucred *cred,
3519c00bb91SKonstantin Belousov 		    struct ksem *ks, struct label *shmlabel,
3529c00bb91SKonstantin Belousov 		    uid_t uid, gid_t gid);
3536bc1e9cdSJohn Baldwin typedef int	(*mpo_posixsem_check_stat_t)(struct ucred *active_cred,
3546bc1e9cdSJohn Baldwin 		    struct ucred *file_cred, struct ksem *ks,
3556bc1e9cdSJohn Baldwin 		    struct label *kslabel);
35630d239bcSRobert Watson typedef int	(*mpo_posixsem_check_unlink_t)(struct ucred *cred,
357fe09513eSRobert Watson 		    struct ksem *ks, struct label *kslabel);
3586bc1e9cdSJohn Baldwin typedef int	(*mpo_posixsem_check_wait_t)(struct ucred *active_cred,
3596bc1e9cdSJohn Baldwin 		    struct ucred *file_cred, struct ksem *ks,
3606bc1e9cdSJohn Baldwin 		    struct label *kslabel);
361179da74eSRobert Watson typedef void	(*mpo_posixsem_create_t)(struct ucred *cred,
362179da74eSRobert Watson 		    struct ksem *ks, struct label *kslabel);
363179da74eSRobert Watson typedef void    (*mpo_posixsem_destroy_label_t)(struct label *label);
364179da74eSRobert Watson typedef void    (*mpo_posixsem_init_label_t)(struct label *label);
365179da74eSRobert Watson 
3669b6dd12eSRobert Watson typedef int	(*mpo_posixshm_check_create_t)(struct ucred *cred,
3679b6dd12eSRobert Watson 		    const char *path);
3688e38aeffSJohn Baldwin typedef int	(*mpo_posixshm_check_mmap_t)(struct ucred *cred,
3698e38aeffSJohn Baldwin 		    struct shmfd *shmfd, struct label *shmlabel, int prot,
3708e38aeffSJohn Baldwin 		    int flags);
3718e38aeffSJohn Baldwin typedef int	(*mpo_posixshm_check_open_t)(struct ucred *cred,
3729b6dd12eSRobert Watson 		    struct shmfd *shmfd, struct label *shmlabel,
3739b6dd12eSRobert Watson 		    accmode_t accmode);
374940cb0e2SKonstantin Belousov typedef int	(*mpo_posixshm_check_read_t)(struct ucred *active_cred,
375940cb0e2SKonstantin Belousov 		    struct ucred *file_cred, struct shmfd *shmfd,
376940cb0e2SKonstantin Belousov 		    struct label *shmlabel);
3779c00bb91SKonstantin Belousov typedef int	(*mpo_posixshm_check_setmode_t)(struct ucred *cred,
3789c00bb91SKonstantin Belousov 		    struct shmfd *shmfd, struct label *shmlabel,
3799c00bb91SKonstantin Belousov 		    mode_t mode);
3809c00bb91SKonstantin Belousov typedef int	(*mpo_posixshm_check_setowner_t)(struct ucred *cred,
3819c00bb91SKonstantin Belousov 		    struct shmfd *shmfd, struct label *shmlabel,
3829c00bb91SKonstantin Belousov 		    uid_t uid, gid_t gid);
3838e38aeffSJohn Baldwin typedef int	(*mpo_posixshm_check_stat_t)(struct ucred *active_cred,
3848e38aeffSJohn Baldwin 		    struct ucred *file_cred, struct shmfd *shmfd,
3858e38aeffSJohn Baldwin 		    struct label *shmlabel);
3868e38aeffSJohn Baldwin typedef int	(*mpo_posixshm_check_truncate_t)(struct ucred *active_cred,
3878e38aeffSJohn Baldwin 		    struct ucred *file_cred, struct shmfd *shmfd,
3888e38aeffSJohn Baldwin 		    struct label *shmlabel);
3898e38aeffSJohn Baldwin typedef int	(*mpo_posixshm_check_unlink_t)(struct ucred *cred,
3908e38aeffSJohn Baldwin 		    struct shmfd *shmfd, struct label *shmlabel);
391940cb0e2SKonstantin Belousov typedef int	(*mpo_posixshm_check_write_t)(struct ucred *active_cred,
392940cb0e2SKonstantin Belousov 		    struct ucred *file_cred, struct shmfd *shmfd,
393940cb0e2SKonstantin Belousov 		    struct label *shmlabel);
3948e38aeffSJohn Baldwin typedef void	(*mpo_posixshm_create_t)(struct ucred *cred,
3958e38aeffSJohn Baldwin 		    struct shmfd *shmfd, struct label *shmlabel);
3968e38aeffSJohn Baldwin typedef void	(*mpo_posixshm_destroy_label_t)(struct label *label);
3978e38aeffSJohn Baldwin typedef void	(*mpo_posixshm_init_label_t)(struct label *label);
3988e38aeffSJohn Baldwin 
399179da74eSRobert Watson typedef int	(*mpo_priv_check_t)(struct ucred *cred, int priv);
400179da74eSRobert Watson typedef int	(*mpo_priv_grant_t)(struct ucred *cred, int priv);
401179da74eSRobert Watson 
40230d239bcSRobert Watson typedef int	(*mpo_proc_check_debug_t)(struct ucred *cred,
40326ae2b86SRobert Watson 		    struct proc *p);
40430d239bcSRobert Watson typedef int	(*mpo_proc_check_sched_t)(struct ucred *cred,
40526ae2b86SRobert Watson 		    struct proc *p);
40630d239bcSRobert Watson typedef int	(*mpo_proc_check_signal_t)(struct ucred *cred,
407ddcdf265SRobert Watson 		    struct proc *proc, int signum);
40830d239bcSRobert Watson typedef int	(*mpo_proc_check_wait_t)(struct ucred *cred,
409babe9a2bSRobert Watson 		    struct proc *proc);
410179da74eSRobert Watson typedef void	(*mpo_proc_destroy_label_t)(struct label *label);
411179da74eSRobert Watson typedef void	(*mpo_proc_init_label_t)(struct label *label);
412179da74eSRobert Watson 
41330d239bcSRobert Watson typedef int	(*mpo_socket_check_accept_t)(struct ucred *cred,
41426ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
41530d239bcSRobert Watson typedef int	(*mpo_socket_check_bind_t)(struct ucred *cred,
41626ae2b86SRobert Watson 		    struct socket *so, struct label *solabel,
41726ae2b86SRobert Watson 		    struct sockaddr *sa);
41830d239bcSRobert Watson typedef int	(*mpo_socket_check_connect_t)(struct ucred *cred,
41926ae2b86SRobert Watson 		    struct socket *so, struct label *solabel,
42026ae2b86SRobert Watson 		    struct sockaddr *sa);
42130d239bcSRobert Watson typedef int	(*mpo_socket_check_create_t)(struct ucred *cred, int domain,
4226758f88eSRobert Watson 		    int type, int protocol);
42330d239bcSRobert Watson typedef int	(*mpo_socket_check_deliver_t)(struct socket *so,
42426ae2b86SRobert Watson 		    struct label *solabel, struct mbuf *m,
42526ae2b86SRobert Watson 		    struct label *mlabel);
42630d239bcSRobert Watson typedef int	(*mpo_socket_check_listen_t)(struct ucred *cred,
42726ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
42830d239bcSRobert Watson typedef int	(*mpo_socket_check_poll_t)(struct ucred *cred,
42926ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
43030d239bcSRobert Watson typedef int	(*mpo_socket_check_receive_t)(struct ucred *cred,
43126ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
43230d239bcSRobert Watson typedef int	(*mpo_socket_check_relabel_t)(struct ucred *cred,
43326ae2b86SRobert Watson 		    struct socket *so, struct label *solabel,
434ddcdf265SRobert Watson 		    struct label *newlabel);
43530d239bcSRobert Watson typedef int	(*mpo_socket_check_send_t)(struct ucred *cred,
43626ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
43730d239bcSRobert Watson typedef int	(*mpo_socket_check_stat_t)(struct ucred *cred,
43826ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
43930d239bcSRobert Watson typedef int	(*mpo_socket_check_visible_t)(struct ucred *cred,
44026ae2b86SRobert Watson 		    struct socket *so, struct label *solabel);
441179da74eSRobert Watson typedef void	(*mpo_socket_copy_label_t)(struct label *src,
442179da74eSRobert Watson 		    struct label *dest);
443179da74eSRobert Watson typedef void	(*mpo_socket_create_t)(struct ucred *cred, struct socket *so,
444179da74eSRobert Watson 		    struct label *solabel);
445179da74eSRobert Watson typedef void	(*mpo_socket_create_mbuf_t)(struct socket *so,
446179da74eSRobert Watson 		    struct label *solabel, struct mbuf *m,
447179da74eSRobert Watson 		    struct label *mlabel);
448179da74eSRobert Watson typedef void	(*mpo_socket_destroy_label_t)(struct label *label);
449179da74eSRobert Watson typedef int	(*mpo_socket_externalize_label_t)(struct label *label,
450179da74eSRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
451179da74eSRobert Watson typedef int	(*mpo_socket_init_label_t)(struct label *label, int flag);
452179da74eSRobert Watson typedef int	(*mpo_socket_internalize_label_t)(struct label *label,
453179da74eSRobert Watson 		    char *element_name, char *element_data, int *claimed);
454179da74eSRobert Watson typedef void	(*mpo_socket_newconn_t)(struct socket *oldso,
455179da74eSRobert Watson 		    struct label *oldsolabel, struct socket *newso,
456179da74eSRobert Watson 		    struct label *newsolabel);
457179da74eSRobert Watson typedef void	(*mpo_socket_relabel_t)(struct ucred *cred, struct socket *so,
458179da74eSRobert Watson 		    struct label *oldlabel, struct label *newlabel);
459179da74eSRobert Watson 
460179da74eSRobert Watson typedef void	(*mpo_socketpeer_destroy_label_t)(struct label *label);
461179da74eSRobert Watson typedef int	(*mpo_socketpeer_externalize_label_t)(struct label *label,
462179da74eSRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
463179da74eSRobert Watson typedef int	(*mpo_socketpeer_init_label_t)(struct label *label,
464179da74eSRobert Watson 		    int flag);
465179da74eSRobert Watson typedef void	(*mpo_socketpeer_set_from_mbuf_t)(struct mbuf *m,
466179da74eSRobert Watson 		    struct label *mlabel, struct socket *so,
467179da74eSRobert Watson 		    struct label *sopeerlabel);
468179da74eSRobert Watson typedef void	(*mpo_socketpeer_set_from_socket_t)(struct socket *oldso,
469179da74eSRobert Watson 		    struct label *oldsolabel, struct socket *newso,
470179da74eSRobert Watson 		    struct label *newsopeerlabel);
471179da74eSRobert Watson 
472179da74eSRobert Watson typedef void	(*mpo_syncache_create_t)(struct label *label,
473179da74eSRobert Watson 		    struct inpcb *inp);
474179da74eSRobert Watson typedef void	(*mpo_syncache_create_mbuf_t)(struct label *sc_label,
475179da74eSRobert Watson 		    struct mbuf *m, struct label *mlabel);
476179da74eSRobert Watson typedef void	(*mpo_syncache_destroy_label_t)(struct label *label);
477179da74eSRobert Watson typedef int	(*mpo_syncache_init_label_t)(struct label *label, int flag);
478179da74eSRobert Watson 
47930d239bcSRobert Watson typedef int	(*mpo_system_check_acct_t)(struct ucred *cred,
48026ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
48130d239bcSRobert Watson typedef int	(*mpo_system_check_audit_t)(struct ucred *cred, void *record,
48218717f69SRobert Watson 		    int length);
48330d239bcSRobert Watson typedef int	(*mpo_system_check_auditctl_t)(struct ucred *cred,
48418717f69SRobert Watson 		    struct vnode *vp, struct label *vplabel);
48530d239bcSRobert Watson typedef int	(*mpo_system_check_auditon_t)(struct ucred *cred, int cmd);
48630d239bcSRobert Watson typedef int	(*mpo_system_check_reboot_t)(struct ucred *cred, int howto);
48730d239bcSRobert Watson typedef int	(*mpo_system_check_swapon_t)(struct ucred *cred,
48826ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
48930d239bcSRobert Watson typedef int	(*mpo_system_check_swapoff_t)(struct ucred *cred,
49026ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
49130d239bcSRobert Watson typedef int	(*mpo_system_check_sysctl_t)(struct ucred *cred,
49263dba32bSPawel Jakub Dawidek 		    struct sysctl_oid *oidp, void *arg1, int arg2,
49363dba32bSPawel Jakub Dawidek 		    struct sysctl_req *req);
494179da74eSRobert Watson 
495179da74eSRobert Watson typedef void	(*mpo_sysvmsg_cleanup_t)(struct label *msglabel);
496179da74eSRobert Watson typedef void	(*mpo_sysvmsg_create_t)(struct ucred *cred,
497179da74eSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqlabel,
498179da74eSRobert Watson 		    struct msg *msgptr, struct label *msglabel);
499179da74eSRobert Watson typedef void	(*mpo_sysvmsg_destroy_label_t)(struct label *label);
500179da74eSRobert Watson typedef void	(*mpo_sysvmsg_init_label_t)(struct label *label);
501179da74eSRobert Watson 
502179da74eSRobert Watson typedef int	(*mpo_sysvmsq_check_msgmsq_t)(struct ucred *cred,
503179da74eSRobert Watson 		    struct msg *msgptr, struct label *msglabel,
504179da74eSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel);
505179da74eSRobert Watson typedef int	(*mpo_sysvmsq_check_msgrcv_t)(struct ucred *cred,
506179da74eSRobert Watson 		    struct msg *msgptr, struct label *msglabel);
507179da74eSRobert Watson typedef int	(*mpo_sysvmsq_check_msgrmid_t)(struct ucred *cred,
508179da74eSRobert Watson 		    struct msg *msgptr, struct label *msglabel);
509179da74eSRobert Watson typedef int	(*mpo_sysvmsq_check_msqget_t)(struct ucred *cred,
510179da74eSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel);
511179da74eSRobert Watson typedef int	(*mpo_sysvmsq_check_msqctl_t)(struct ucred *cred,
512179da74eSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel,
513179da74eSRobert Watson 		    int cmd);
514179da74eSRobert Watson typedef int	(*mpo_sysvmsq_check_msqrcv_t)(struct ucred *cred,
515179da74eSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel);
516179da74eSRobert Watson typedef int	(*mpo_sysvmsq_check_msqsnd_t)(struct ucred *cred,
517179da74eSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqklabel);
518179da74eSRobert Watson typedef void	(*mpo_sysvmsq_cleanup_t)(struct label *msqlabel);
519179da74eSRobert Watson typedef void	(*mpo_sysvmsq_create_t)(struct ucred *cred,
520179da74eSRobert Watson 		    struct msqid_kernel *msqkptr, struct label *msqlabel);
521179da74eSRobert Watson typedef void	(*mpo_sysvmsq_destroy_label_t)(struct label *label);
522179da74eSRobert Watson typedef void	(*mpo_sysvmsq_init_label_t)(struct label *label);
523179da74eSRobert Watson 
524179da74eSRobert Watson typedef int	(*mpo_sysvsem_check_semctl_t)(struct ucred *cred,
525179da74eSRobert Watson 		    struct semid_kernel *semakptr, struct label *semaklabel,
526179da74eSRobert Watson 		    int cmd);
527179da74eSRobert Watson typedef int	(*mpo_sysvsem_check_semget_t)(struct ucred *cred,
528179da74eSRobert Watson 		    struct semid_kernel *semakptr, struct label *semaklabel);
529179da74eSRobert Watson typedef int	(*mpo_sysvsem_check_semop_t)(struct ucred *cred,
530179da74eSRobert Watson 		    struct semid_kernel *semakptr, struct label *semaklabel,
531179da74eSRobert Watson 		    size_t accesstype);
532179da74eSRobert Watson typedef void	(*mpo_sysvsem_cleanup_t)(struct label *semalabel);
533179da74eSRobert Watson typedef void	(*mpo_sysvsem_create_t)(struct ucred *cred,
534179da74eSRobert Watson 		    struct semid_kernel *semakptr, struct label *semalabel);
535179da74eSRobert Watson typedef void	(*mpo_sysvsem_destroy_label_t)(struct label *label);
536179da74eSRobert Watson typedef void	(*mpo_sysvsem_init_label_t)(struct label *label);
537179da74eSRobert Watson 
538179da74eSRobert Watson typedef int	(*mpo_sysvshm_check_shmat_t)(struct ucred *cred,
539179da74eSRobert Watson 		    struct shmid_kernel *shmsegptr,
540179da74eSRobert Watson 		    struct label *shmseglabel, int shmflg);
541179da74eSRobert Watson typedef int	(*mpo_sysvshm_check_shmctl_t)(struct ucred *cred,
542179da74eSRobert Watson 		    struct shmid_kernel *shmsegptr,
543179da74eSRobert Watson 		    struct label *shmseglabel, int cmd);
544179da74eSRobert Watson typedef int	(*mpo_sysvshm_check_shmdt_t)(struct ucred *cred,
545179da74eSRobert Watson 		    struct shmid_kernel *shmsegptr,
546179da74eSRobert Watson 		    struct label *shmseglabel);
547179da74eSRobert Watson typedef int	(*mpo_sysvshm_check_shmget_t)(struct ucred *cred,
548179da74eSRobert Watson 		    struct shmid_kernel *shmsegptr,
549179da74eSRobert Watson 		    struct label *shmseglabel, int shmflg);
550179da74eSRobert Watson typedef void	(*mpo_sysvshm_cleanup_t)(struct label *shmlabel);
551179da74eSRobert Watson typedef void	(*mpo_sysvshm_create_t)(struct ucred *cred,
552179da74eSRobert Watson 		    struct shmid_kernel *shmsegptr, struct label *shmlabel);
553179da74eSRobert Watson typedef void	(*mpo_sysvshm_destroy_label_t)(struct label *label);
554179da74eSRobert Watson typedef void	(*mpo_sysvshm_init_label_t)(struct label *label);
555179da74eSRobert Watson 
556179da74eSRobert Watson typedef void	(*mpo_thread_userret_t)(struct thread *thread);
557179da74eSRobert Watson 
558179da74eSRobert Watson typedef int	(*mpo_vnode_associate_extattr_t)(struct mount *mp,
559179da74eSRobert Watson 		    struct label *mplabel, struct vnode *vp,
560179da74eSRobert Watson 		    struct label *vplabel);
561179da74eSRobert Watson typedef void	(*mpo_vnode_associate_singlelabel_t)(struct mount *mp,
562179da74eSRobert Watson 		    struct label *mplabel, struct vnode *vp,
563179da74eSRobert Watson 		    struct label *vplabel);
56430d239bcSRobert Watson typedef int	(*mpo_vnode_check_access_t)(struct ucred *cred,
56515bc6b2bSEdward Tomasz Napierala 		    struct vnode *vp, struct label *vplabel,
56615bc6b2bSEdward Tomasz Napierala 		    accmode_t accmode);
56730d239bcSRobert Watson typedef int	(*mpo_vnode_check_chdir_t)(struct ucred *cred,
56826ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel);
56930d239bcSRobert Watson typedef int	(*mpo_vnode_check_chroot_t)(struct ucred *cred,
57026ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel);
57130d239bcSRobert Watson typedef int	(*mpo_vnode_check_create_t)(struct ucred *cred,
57226ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
573ddcdf265SRobert Watson 		    struct componentname *cnp, struct vattr *vap);
57430d239bcSRobert Watson typedef int	(*mpo_vnode_check_deleteacl_t)(struct ucred *cred,
57526ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
57626ae2b86SRobert Watson 		    acl_type_t type);
57730d239bcSRobert Watson typedef int	(*mpo_vnode_check_deleteextattr_t)(struct ucred *cred,
57826ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
57926ae2b86SRobert Watson 		    int attrnamespace, const char *name);
58030d239bcSRobert Watson typedef int	(*mpo_vnode_check_exec_t)(struct ucred *cred,
58126ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
5821d82b391SRobert Watson 		    struct image_params *imgp, struct label *execlabel);
58330d239bcSRobert Watson typedef int	(*mpo_vnode_check_getacl_t)(struct ucred *cred,
58426ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
58526ae2b86SRobert Watson 		    acl_type_t type);
58630d239bcSRobert Watson typedef int	(*mpo_vnode_check_getextattr_t)(struct ucred *cred,
58726ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
588fefd0ac8SRobert Watson 		    int attrnamespace, const char *name);
58930d239bcSRobert Watson typedef int	(*mpo_vnode_check_link_t)(struct ucred *cred,
59026ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
59126ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
59226ae2b86SRobert Watson 		    struct componentname *cnp);
59330d239bcSRobert Watson typedef int	(*mpo_vnode_check_listextattr_t)(struct ucred *cred,
59426ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
5951d82b391SRobert Watson 		    int attrnamespace);
59630d239bcSRobert Watson typedef int	(*mpo_vnode_check_lookup_t)(struct ucred *cred,
59726ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
598ddcdf265SRobert Watson 		    struct componentname *cnp);
59930d239bcSRobert Watson typedef int	(*mpo_vnode_check_mmap_t)(struct ucred *cred,
6001d82b391SRobert Watson 		    struct vnode *vp, struct label *label, int prot,
6011d82b391SRobert Watson 		    int flags);
60230d239bcSRobert Watson typedef void	(*mpo_vnode_check_mmap_downgrade_t)(struct ucred *cred,
60326ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, int *prot);
60430d239bcSRobert Watson typedef int	(*mpo_vnode_check_mprotect_t)(struct ucred *cred,
60526ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, int prot);
60630d239bcSRobert Watson typedef int	(*mpo_vnode_check_open_t)(struct ucred *cred,
60715bc6b2bSEdward Tomasz Napierala 		    struct vnode *vp, struct label *vplabel,
60815bc6b2bSEdward Tomasz Napierala 		    accmode_t accmode);
60930d239bcSRobert Watson typedef int	(*mpo_vnode_check_poll_t)(struct ucred *active_cred,
610177142e4SRobert Watson 		    struct ucred *file_cred, struct vnode *vp,
61126ae2b86SRobert Watson 		    struct label *vplabel);
61230d239bcSRobert Watson typedef int	(*mpo_vnode_check_read_t)(struct ucred *active_cred,
613177142e4SRobert Watson 		    struct ucred *file_cred, struct vnode *vp,
61426ae2b86SRobert Watson 		    struct label *vplabel);
61530d239bcSRobert Watson typedef int	(*mpo_vnode_check_readdir_t)(struct ucred *cred,
61626ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel);
61730d239bcSRobert Watson typedef int	(*mpo_vnode_check_readlink_t)(struct ucred *cred,
61826ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
61930d239bcSRobert Watson typedef int	(*mpo_vnode_check_relabel_t)(struct ucred *cred,
62026ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
621ddcdf265SRobert Watson 		    struct label *newlabel);
62230d239bcSRobert Watson typedef int	(*mpo_vnode_check_rename_from_t)(struct ucred *cred,
62326ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
62426ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
625ddcdf265SRobert Watson 		    struct componentname *cnp);
62630d239bcSRobert Watson typedef int	(*mpo_vnode_check_rename_to_t)(struct ucred *cred,
62726ae2b86SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
62826ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, int samedir,
6291d82b391SRobert Watson 		    struct componentname *cnp);
63030d239bcSRobert Watson typedef int	(*mpo_vnode_check_revoke_t)(struct ucred *cred,
63126ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel);
63230d239bcSRobert Watson typedef int	(*mpo_vnode_check_setacl_t)(struct ucred *cred,
63326ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, acl_type_t type,
634ddcdf265SRobert Watson 		    struct acl *acl);
63530d239bcSRobert Watson typedef int	(*mpo_vnode_check_setextattr_t)(struct ucred *cred,
63626ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
637fefd0ac8SRobert Watson 		    int attrnamespace, const char *name);
63830d239bcSRobert Watson typedef int	(*mpo_vnode_check_setflags_t)(struct ucred *cred,
63926ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, u_long flags);
64030d239bcSRobert Watson typedef int	(*mpo_vnode_check_setmode_t)(struct ucred *cred,
64126ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, mode_t mode);
64230d239bcSRobert Watson typedef int	(*mpo_vnode_check_setowner_t)(struct ucred *cred,
64326ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel, uid_t uid,
644ddcdf265SRobert Watson 		    gid_t gid);
64530d239bcSRobert Watson typedef int	(*mpo_vnode_check_setutimes_t)(struct ucred *cred,
64626ae2b86SRobert Watson 		    struct vnode *vp, struct label *vplabel,
647ddcdf265SRobert Watson 		    struct timespec atime, struct timespec mtime);
64830d239bcSRobert Watson typedef int	(*mpo_vnode_check_stat_t)(struct ucred *active_cred,
649177142e4SRobert Watson 		    struct ucred *file_cred, struct vnode *vp,
65026ae2b86SRobert Watson 		    struct label *vplabel);
65130d239bcSRobert Watson typedef int	(*mpo_vnode_check_unlink_t)(struct ucred *cred,
65245e0f3d6SRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
65345e0f3d6SRobert Watson 		    struct vnode *vp, struct label *vplabel,
65445e0f3d6SRobert Watson 		    struct componentname *cnp);
65530d239bcSRobert Watson typedef int	(*mpo_vnode_check_write_t)(struct ucred *active_cred,
656177142e4SRobert Watson 		    struct ucred *file_cred, struct vnode *vp,
65726ae2b86SRobert Watson 		    struct label *vplabel);
658179da74eSRobert Watson typedef void	(*mpo_vnode_copy_label_t)(struct label *src,
659179da74eSRobert Watson 		    struct label *dest);
660179da74eSRobert Watson typedef int	(*mpo_vnode_create_extattr_t)(struct ucred *cred,
661179da74eSRobert Watson 		    struct mount *mp, struct label *mplabel,
662179da74eSRobert Watson 		    struct vnode *dvp, struct label *dvplabel,
663179da74eSRobert Watson 		    struct vnode *vp, struct label *vplabel,
664179da74eSRobert Watson 		    struct componentname *cnp);
665179da74eSRobert Watson typedef void	(*mpo_vnode_destroy_label_t)(struct label *label);
666179da74eSRobert Watson typedef void	(*mpo_vnode_execve_transition_t)(struct ucred *old,
667179da74eSRobert Watson 		    struct ucred *new, struct vnode *vp,
668179da74eSRobert Watson 		    struct label *vplabel, struct label *interpvplabel,
669179da74eSRobert Watson 		    struct image_params *imgp, struct label *execlabel);
670179da74eSRobert Watson typedef int	(*mpo_vnode_execve_will_transition_t)(struct ucred *old,
671179da74eSRobert Watson 		    struct vnode *vp, struct label *vplabel,
672179da74eSRobert Watson 		    struct label *interpvplabel, struct image_params *imgp,
673179da74eSRobert Watson 		    struct label *execlabel);
674179da74eSRobert Watson typedef int	(*mpo_vnode_externalize_label_t)(struct label *label,
675179da74eSRobert Watson 		    char *element_name, struct sbuf *sb, int *claimed);
676179da74eSRobert Watson typedef void	(*mpo_vnode_init_label_t)(struct label *label);
677179da74eSRobert Watson typedef int	(*mpo_vnode_internalize_label_t)(struct label *label,
678179da74eSRobert Watson 		    char *element_name, char *element_data, int *claimed);
679179da74eSRobert Watson typedef void	(*mpo_vnode_relabel_t)(struct ucred *cred, struct vnode *vp,
680179da74eSRobert Watson 		    struct label *vplabel, struct label *label);
681179da74eSRobert Watson typedef int	(*mpo_vnode_setlabel_extattr_t)(struct ucred *cred,
682179da74eSRobert Watson 		    struct vnode *vp, struct label *vplabel,
683179da74eSRobert Watson 		    struct label *intlabel);
6841d82b391SRobert Watson 
6851d82b391SRobert Watson struct mac_policy_ops {
6861d82b391SRobert Watson 	/*
6871d82b391SRobert Watson 	 * Policy module operations.
6881d82b391SRobert Watson 	 */
6891d82b391SRobert Watson 	mpo_destroy_t				mpo_destroy;
6901d82b391SRobert Watson 	mpo_init_t				mpo_init;
6911d82b391SRobert Watson 
6921d82b391SRobert Watson 	/*
6931d82b391SRobert Watson 	 * General policy-directed security system call so that policies may
6941d82b391SRobert Watson 	 * implement new services without reserving explicit system call
6951d82b391SRobert Watson 	 * numbers.
6961d82b391SRobert Watson 	 */
6971d82b391SRobert Watson 	mpo_syscall_t				mpo_syscall;
6981d82b391SRobert Watson 
6991d82b391SRobert Watson 	/*
7001d82b391SRobert Watson 	 * Label operations.  Initialize label storage, destroy label
7011d82b391SRobert Watson 	 * storage, recycle for re-use without init/destroy, copy a label to
7021d82b391SRobert Watson 	 * initialized storage, and externalize/internalize from/to
7031d82b391SRobert Watson 	 * initialized storage.
7041d82b391SRobert Watson 	 */
705179da74eSRobert Watson 	mpo_bpfdesc_check_receive_t		mpo_bpfdesc_check_receive;
706179da74eSRobert Watson 	mpo_bpfdesc_create_t			mpo_bpfdesc_create;
707179da74eSRobert Watson 	mpo_bpfdesc_create_mbuf_t		mpo_bpfdesc_create_mbuf;
70830d239bcSRobert Watson 	mpo_bpfdesc_destroy_label_t		mpo_bpfdesc_destroy_label;
709179da74eSRobert Watson 	mpo_bpfdesc_init_label_t		mpo_bpfdesc_init_label;
7101d82b391SRobert Watson 
711212ab0cfSRobert Watson 	mpo_cred_associate_nfsd_t		mpo_cred_associate_nfsd;
712179da74eSRobert Watson 	mpo_cred_check_relabel_t		mpo_cred_check_relabel;
7136f6174a7SRobert Watson 	mpo_cred_check_setaudit_t		mpo_cred_check_setaudit;
7146f6174a7SRobert Watson 	mpo_cred_check_setaudit_addr_t		mpo_cred_check_setaudit_addr;
7156f6174a7SRobert Watson 	mpo_cred_check_setauid_t		mpo_cred_check_setauid;
7166f6174a7SRobert Watson 	mpo_cred_check_setuid_t			mpo_cred_check_setuid;
7176f6174a7SRobert Watson 	mpo_cred_check_seteuid_t		mpo_cred_check_seteuid;
7186f6174a7SRobert Watson 	mpo_cred_check_setgid_t			mpo_cred_check_setgid;
7196f6174a7SRobert Watson 	mpo_cred_check_setegid_t		mpo_cred_check_setegid;
7206f6174a7SRobert Watson 	mpo_cred_check_setgroups_t		mpo_cred_check_setgroups;
7216f6174a7SRobert Watson 	mpo_cred_check_setreuid_t		mpo_cred_check_setreuid;
7226f6174a7SRobert Watson 	mpo_cred_check_setregid_t		mpo_cred_check_setregid;
7236f6174a7SRobert Watson 	mpo_cred_check_setresuid_t		mpo_cred_check_setresuid;
7246f6174a7SRobert Watson 	mpo_cred_check_setresgid_t		mpo_cred_check_setresgid;
725179da74eSRobert Watson 	mpo_cred_check_visible_t		mpo_cred_check_visible;
726179da74eSRobert Watson 	mpo_cred_copy_label_t			mpo_cred_copy_label;
727212ab0cfSRobert Watson 	mpo_cred_create_swapper_t		mpo_cred_create_swapper;
728212ab0cfSRobert Watson 	mpo_cred_create_init_t			mpo_cred_create_init;
729179da74eSRobert Watson 	mpo_cred_destroy_label_t		mpo_cred_destroy_label;
730179da74eSRobert Watson 	mpo_cred_externalize_label_t		mpo_cred_externalize_label;
731179da74eSRobert Watson 	mpo_cred_init_label_t			mpo_cred_init_label;
732179da74eSRobert Watson 	mpo_cred_internalize_label_t		mpo_cred_internalize_label;
733179da74eSRobert Watson 	mpo_cred_relabel_t			mpo_cred_relabel;
734179da74eSRobert Watson 
7352449b9e5SMitchell Horne 	mpo_ddb_command_register_t		mpo_ddb_command_register;
7362449b9e5SMitchell Horne 	mpo_ddb_command_exec_t			mpo_ddb_command_exec;
7372449b9e5SMitchell Horne 
73830d239bcSRobert Watson 	mpo_devfs_create_device_t		mpo_devfs_create_device;
73930d239bcSRobert Watson 	mpo_devfs_create_directory_t		mpo_devfs_create_directory;
74030d239bcSRobert Watson 	mpo_devfs_create_symlink_t		mpo_devfs_create_symlink;
741179da74eSRobert Watson 	mpo_devfs_destroy_label_t		mpo_devfs_destroy_label;
742179da74eSRobert Watson 	mpo_devfs_init_label_t			mpo_devfs_init_label;
74330d239bcSRobert Watson 	mpo_devfs_update_t			mpo_devfs_update;
744179da74eSRobert Watson 	mpo_devfs_vnode_associate_t		mpo_devfs_vnode_associate;
7451d82b391SRobert Watson 
74630d239bcSRobert Watson 	mpo_ifnet_check_relabel_t		mpo_ifnet_check_relabel;
74730d239bcSRobert Watson 	mpo_ifnet_check_transmit_t		mpo_ifnet_check_transmit;
748179da74eSRobert Watson 	mpo_ifnet_copy_label_t			mpo_ifnet_copy_label;
749179da74eSRobert Watson 	mpo_ifnet_create_t			mpo_ifnet_create;
750179da74eSRobert Watson 	mpo_ifnet_create_mbuf_t			mpo_ifnet_create_mbuf;
751179da74eSRobert Watson 	mpo_ifnet_destroy_label_t		mpo_ifnet_destroy_label;
752179da74eSRobert Watson 	mpo_ifnet_externalize_label_t		mpo_ifnet_externalize_label;
753179da74eSRobert Watson 	mpo_ifnet_init_label_t			mpo_ifnet_init_label;
754179da74eSRobert Watson 	mpo_ifnet_internalize_label_t		mpo_ifnet_internalize_label;
755179da74eSRobert Watson 	mpo_ifnet_relabel_t			mpo_ifnet_relabel;
756179da74eSRobert Watson 
75730d239bcSRobert Watson 	mpo_inpcb_check_deliver_t		mpo_inpcb_check_deliver;
75837ee7293SBjoern A. Zeeb 	mpo_inpcb_check_visible_t		mpo_inpcb_check_visible;
759179da74eSRobert Watson 	mpo_inpcb_create_t			mpo_inpcb_create;
760179da74eSRobert Watson 	mpo_inpcb_create_mbuf_t			mpo_inpcb_create_mbuf;
761179da74eSRobert Watson 	mpo_inpcb_destroy_label_t		mpo_inpcb_destroy_label;
762179da74eSRobert Watson 	mpo_inpcb_init_label_t			mpo_inpcb_init_label;
763179da74eSRobert Watson 	mpo_inpcb_sosetlabel_t			mpo_inpcb_sosetlabel;
764179da74eSRobert Watson 
7654b908c8bSRobert Watson 	mpo_ip6q_create_t			mpo_ip6q_create;
7664b908c8bSRobert Watson 	mpo_ip6q_destroy_label_t		mpo_ip6q_destroy_label;
7674b908c8bSRobert Watson 	mpo_ip6q_init_label_t			mpo_ip6q_init_label;
7684b908c8bSRobert Watson 	mpo_ip6q_match_t			mpo_ip6q_match;
7694b908c8bSRobert Watson 	mpo_ip6q_reassemble			mpo_ip6q_reassemble;
7704b908c8bSRobert Watson 	mpo_ip6q_update_t			mpo_ip6q_update;
7714b908c8bSRobert Watson 
772179da74eSRobert Watson 	mpo_ipq_create_t			mpo_ipq_create;
773179da74eSRobert Watson 	mpo_ipq_destroy_label_t			mpo_ipq_destroy_label;
774179da74eSRobert Watson 	mpo_ipq_init_label_t			mpo_ipq_init_label;
775179da74eSRobert Watson 	mpo_ipq_match_t				mpo_ipq_match;
776179da74eSRobert Watson 	mpo_ipq_reassemble			mpo_ipq_reassemble;
777179da74eSRobert Watson 	mpo_ipq_update_t			mpo_ipq_update;
778179da74eSRobert Watson 
7792449b9e5SMitchell Horne 	mpo_kdb_check_backend_t			mpo_kdb_check_backend;
7802449b9e5SMitchell Horne 
78130d239bcSRobert Watson 	mpo_kenv_check_dump_t			mpo_kenv_check_dump;
78230d239bcSRobert Watson 	mpo_kenv_check_get_t			mpo_kenv_check_get;
78330d239bcSRobert Watson 	mpo_kenv_check_set_t			mpo_kenv_check_set;
78430d239bcSRobert Watson 	mpo_kenv_check_unset_t			mpo_kenv_check_unset;
785179da74eSRobert Watson 
78630d239bcSRobert Watson 	mpo_kld_check_load_t			mpo_kld_check_load;
78730d239bcSRobert Watson 	mpo_kld_check_stat_t			mpo_kld_check_stat;
788179da74eSRobert Watson 
789179da74eSRobert Watson 	mpo_mbuf_copy_label_t			mpo_mbuf_copy_label;
790179da74eSRobert Watson 	mpo_mbuf_destroy_label_t		mpo_mbuf_destroy_label;
791179da74eSRobert Watson 	mpo_mbuf_init_label_t			mpo_mbuf_init_label;
792179da74eSRobert Watson 
79330d239bcSRobert Watson 	mpo_mount_check_stat_t			mpo_mount_check_stat;
794179da74eSRobert Watson 	mpo_mount_create_t			mpo_mount_create;
795179da74eSRobert Watson 	mpo_mount_destroy_label_t		mpo_mount_destroy_label;
796179da74eSRobert Watson 	mpo_mount_init_label_t			mpo_mount_init_label;
797179da74eSRobert Watson 
798b9b0dac3SRobert Watson 	mpo_netinet_arp_send_t			mpo_netinet_arp_send;
799a13e21f7SRobert Watson 	mpo_netinet_firewall_reply_t		mpo_netinet_firewall_reply;
80086407646SRobert Watson 	mpo_netinet_firewall_send_t		mpo_netinet_firewall_send;
801179da74eSRobert Watson 	mpo_netinet_fragment_t			mpo_netinet_fragment;
802179da74eSRobert Watson 	mpo_netinet_icmp_reply_t		mpo_netinet_icmp_reply;
803a13e21f7SRobert Watson 	mpo_netinet_icmp_replyinplace_t		mpo_netinet_icmp_replyinplace;
804b9b0dac3SRobert Watson 	mpo_netinet_igmp_send_t			mpo_netinet_igmp_send;
805179da74eSRobert Watson 	mpo_netinet_tcp_reply_t			mpo_netinet_tcp_reply;
806179da74eSRobert Watson 
807b9b0dac3SRobert Watson 	mpo_netinet6_nd6_send_t			mpo_netinet6_nd6_send;
808b9b0dac3SRobert Watson 
80930d239bcSRobert Watson 	mpo_pipe_check_ioctl_t			mpo_pipe_check_ioctl;
81030d239bcSRobert Watson 	mpo_pipe_check_poll_t			mpo_pipe_check_poll;
81130d239bcSRobert Watson 	mpo_pipe_check_read_t			mpo_pipe_check_read;
81230d239bcSRobert Watson 	mpo_pipe_check_relabel_t		mpo_pipe_check_relabel;
81330d239bcSRobert Watson 	mpo_pipe_check_stat_t			mpo_pipe_check_stat;
81430d239bcSRobert Watson 	mpo_pipe_check_write_t			mpo_pipe_check_write;
815179da74eSRobert Watson 	mpo_pipe_copy_label_t			mpo_pipe_copy_label;
816179da74eSRobert Watson 	mpo_pipe_create_t			mpo_pipe_create;
817179da74eSRobert Watson 	mpo_pipe_destroy_label_t		mpo_pipe_destroy_label;
818179da74eSRobert Watson 	mpo_pipe_externalize_label_t		mpo_pipe_externalize_label;
819179da74eSRobert Watson 	mpo_pipe_init_label_t			mpo_pipe_init_label;
820179da74eSRobert Watson 	mpo_pipe_internalize_label_t		mpo_pipe_internalize_label;
821179da74eSRobert Watson 	mpo_pipe_relabel_t			mpo_pipe_relabel;
822179da74eSRobert Watson 
82330d239bcSRobert Watson 	mpo_posixsem_check_getvalue_t		mpo_posixsem_check_getvalue;
82430d239bcSRobert Watson 	mpo_posixsem_check_open_t		mpo_posixsem_check_open;
82530d239bcSRobert Watson 	mpo_posixsem_check_post_t		mpo_posixsem_check_post;
8269c00bb91SKonstantin Belousov 	mpo_posixsem_check_setmode_t		mpo_posixsem_check_setmode;
8279c00bb91SKonstantin Belousov 	mpo_posixsem_check_setowner_t		mpo_posixsem_check_setowner;
8286bc1e9cdSJohn Baldwin 	mpo_posixsem_check_stat_t		mpo_posixsem_check_stat;
82930d239bcSRobert Watson 	mpo_posixsem_check_unlink_t		mpo_posixsem_check_unlink;
83030d239bcSRobert Watson 	mpo_posixsem_check_wait_t		mpo_posixsem_check_wait;
831179da74eSRobert Watson 	mpo_posixsem_create_t			mpo_posixsem_create;
832179da74eSRobert Watson 	mpo_posixsem_destroy_label_t		mpo_posixsem_destroy_label;
833179da74eSRobert Watson 	mpo_posixsem_init_label_t		mpo_posixsem_init_label;
834179da74eSRobert Watson 
8359b6dd12eSRobert Watson 	mpo_posixshm_check_create_t		mpo_posixshm_check_create;
8368e38aeffSJohn Baldwin 	mpo_posixshm_check_mmap_t		mpo_posixshm_check_mmap;
8378e38aeffSJohn Baldwin 	mpo_posixshm_check_open_t		mpo_posixshm_check_open;
838940cb0e2SKonstantin Belousov 	mpo_posixshm_check_read_t		mpo_posixshm_check_read;
8399c00bb91SKonstantin Belousov 	mpo_posixshm_check_setmode_t		mpo_posixshm_check_setmode;
8409c00bb91SKonstantin Belousov 	mpo_posixshm_check_setowner_t		mpo_posixshm_check_setowner;
8418e38aeffSJohn Baldwin 	mpo_posixshm_check_stat_t		mpo_posixshm_check_stat;
8428e38aeffSJohn Baldwin 	mpo_posixshm_check_truncate_t		mpo_posixshm_check_truncate;
8438e38aeffSJohn Baldwin 	mpo_posixshm_check_unlink_t		mpo_posixshm_check_unlink;
844940cb0e2SKonstantin Belousov 	mpo_posixshm_check_write_t		mpo_posixshm_check_write;
8458e38aeffSJohn Baldwin 	mpo_posixshm_create_t			mpo_posixshm_create;
8468e38aeffSJohn Baldwin 	mpo_posixshm_destroy_label_t		mpo_posixshm_destroy_label;
8478e38aeffSJohn Baldwin 	mpo_posixshm_init_label_t		mpo_posixshm_init_label;
8488e38aeffSJohn Baldwin 
849179da74eSRobert Watson 	mpo_priv_check_t			mpo_priv_check;
850179da74eSRobert Watson 	mpo_priv_grant_t			mpo_priv_grant;
851179da74eSRobert Watson 
85230d239bcSRobert Watson 	mpo_proc_check_debug_t			mpo_proc_check_debug;
85330d239bcSRobert Watson 	mpo_proc_check_sched_t			mpo_proc_check_sched;
85430d239bcSRobert Watson 	mpo_proc_check_signal_t			mpo_proc_check_signal;
85530d239bcSRobert Watson 	mpo_proc_check_wait_t			mpo_proc_check_wait;
856179da74eSRobert Watson 	mpo_proc_destroy_label_t		mpo_proc_destroy_label;
857179da74eSRobert Watson 	mpo_proc_init_label_t			mpo_proc_init_label;
858179da74eSRobert Watson 
85930d239bcSRobert Watson 	mpo_socket_check_accept_t		mpo_socket_check_accept;
86030d239bcSRobert Watson 	mpo_socket_check_bind_t			mpo_socket_check_bind;
86130d239bcSRobert Watson 	mpo_socket_check_connect_t		mpo_socket_check_connect;
86230d239bcSRobert Watson 	mpo_socket_check_create_t		mpo_socket_check_create;
86330d239bcSRobert Watson 	mpo_socket_check_deliver_t		mpo_socket_check_deliver;
86430d239bcSRobert Watson 	mpo_socket_check_listen_t		mpo_socket_check_listen;
86530d239bcSRobert Watson 	mpo_socket_check_poll_t			mpo_socket_check_poll;
86630d239bcSRobert Watson 	mpo_socket_check_receive_t		mpo_socket_check_receive;
86730d239bcSRobert Watson 	mpo_socket_check_relabel_t		mpo_socket_check_relabel;
86830d239bcSRobert Watson 	mpo_socket_check_send_t			mpo_socket_check_send;
86930d239bcSRobert Watson 	mpo_socket_check_stat_t			mpo_socket_check_stat;
87030d239bcSRobert Watson 	mpo_socket_check_visible_t		mpo_socket_check_visible;
871179da74eSRobert Watson 	mpo_socket_copy_label_t			mpo_socket_copy_label;
872179da74eSRobert Watson 	mpo_socket_create_t			mpo_socket_create;
873179da74eSRobert Watson 	mpo_socket_create_mbuf_t		mpo_socket_create_mbuf;
874179da74eSRobert Watson 	mpo_socket_destroy_label_t		mpo_socket_destroy_label;
875179da74eSRobert Watson 	mpo_socket_externalize_label_t		mpo_socket_externalize_label;
876179da74eSRobert Watson 	mpo_socket_init_label_t			mpo_socket_init_label;
877179da74eSRobert Watson 	mpo_socket_internalize_label_t		mpo_socket_internalize_label;
878179da74eSRobert Watson 	mpo_socket_newconn_t			mpo_socket_newconn;
879179da74eSRobert Watson 	mpo_socket_relabel_t			mpo_socket_relabel;
880179da74eSRobert Watson 
881179da74eSRobert Watson 	mpo_socketpeer_destroy_label_t		mpo_socketpeer_destroy_label;
882179da74eSRobert Watson 	mpo_socketpeer_externalize_label_t	mpo_socketpeer_externalize_label;
883179da74eSRobert Watson 	mpo_socketpeer_init_label_t		mpo_socketpeer_init_label;
884179da74eSRobert Watson 	mpo_socketpeer_set_from_mbuf_t		mpo_socketpeer_set_from_mbuf;
885179da74eSRobert Watson 	mpo_socketpeer_set_from_socket_t	mpo_socketpeer_set_from_socket;
886179da74eSRobert Watson 
887179da74eSRobert Watson 	mpo_syncache_init_label_t		mpo_syncache_init_label;
888179da74eSRobert Watson 	mpo_syncache_destroy_label_t		mpo_syncache_destroy_label;
889179da74eSRobert Watson 	mpo_syncache_create_t			mpo_syncache_create;
890179da74eSRobert Watson 	mpo_syncache_create_mbuf_t		mpo_syncache_create_mbuf;
891179da74eSRobert Watson 
89230d239bcSRobert Watson 	mpo_system_check_acct_t			mpo_system_check_acct;
89330d239bcSRobert Watson 	mpo_system_check_audit_t		mpo_system_check_audit;
89430d239bcSRobert Watson 	mpo_system_check_auditctl_t		mpo_system_check_auditctl;
89530d239bcSRobert Watson 	mpo_system_check_auditon_t		mpo_system_check_auditon;
89630d239bcSRobert Watson 	mpo_system_check_reboot_t		mpo_system_check_reboot;
89730d239bcSRobert Watson 	mpo_system_check_swapon_t		mpo_system_check_swapon;
89830d239bcSRobert Watson 	mpo_system_check_swapoff_t		mpo_system_check_swapoff;
89930d239bcSRobert Watson 	mpo_system_check_sysctl_t		mpo_system_check_sysctl;
900179da74eSRobert Watson 
901179da74eSRobert Watson 	mpo_sysvmsg_cleanup_t			mpo_sysvmsg_cleanup;
902179da74eSRobert Watson 	mpo_sysvmsg_create_t			mpo_sysvmsg_create;
903179da74eSRobert Watson 	mpo_sysvmsg_destroy_label_t		mpo_sysvmsg_destroy_label;
904179da74eSRobert Watson 	mpo_sysvmsg_init_label_t		mpo_sysvmsg_init_label;
905179da74eSRobert Watson 
906179da74eSRobert Watson 	mpo_sysvmsq_check_msgmsq_t		mpo_sysvmsq_check_msgmsq;
907179da74eSRobert Watson 	mpo_sysvmsq_check_msgrcv_t		mpo_sysvmsq_check_msgrcv;
908179da74eSRobert Watson 	mpo_sysvmsq_check_msgrmid_t		mpo_sysvmsq_check_msgrmid;
909179da74eSRobert Watson 	mpo_sysvmsq_check_msqctl_t		mpo_sysvmsq_check_msqctl;
910179da74eSRobert Watson 	mpo_sysvmsq_check_msqget_t		mpo_sysvmsq_check_msqget;
911179da74eSRobert Watson 	mpo_sysvmsq_check_msqrcv_t		mpo_sysvmsq_check_msqrcv;
912179da74eSRobert Watson 	mpo_sysvmsq_check_msqsnd_t		mpo_sysvmsq_check_msqsnd;
913179da74eSRobert Watson 	mpo_sysvmsq_cleanup_t			mpo_sysvmsq_cleanup;
914179da74eSRobert Watson 	mpo_sysvmsq_create_t			mpo_sysvmsq_create;
915179da74eSRobert Watson 	mpo_sysvmsq_destroy_label_t		mpo_sysvmsq_destroy_label;
916179da74eSRobert Watson 	mpo_sysvmsq_init_label_t		mpo_sysvmsq_init_label;
917179da74eSRobert Watson 
918179da74eSRobert Watson 	mpo_sysvsem_check_semctl_t		mpo_sysvsem_check_semctl;
919179da74eSRobert Watson 	mpo_sysvsem_check_semget_t		mpo_sysvsem_check_semget;
920179da74eSRobert Watson 	mpo_sysvsem_check_semop_t		mpo_sysvsem_check_semop;
921179da74eSRobert Watson 	mpo_sysvsem_cleanup_t			mpo_sysvsem_cleanup;
922179da74eSRobert Watson 	mpo_sysvsem_create_t			mpo_sysvsem_create;
923179da74eSRobert Watson 	mpo_sysvsem_destroy_label_t		mpo_sysvsem_destroy_label;
924179da74eSRobert Watson 	mpo_sysvsem_init_label_t		mpo_sysvsem_init_label;
925179da74eSRobert Watson 
926179da74eSRobert Watson 	mpo_sysvshm_check_shmat_t		mpo_sysvshm_check_shmat;
927179da74eSRobert Watson 	mpo_sysvshm_check_shmctl_t		mpo_sysvshm_check_shmctl;
928179da74eSRobert Watson 	mpo_sysvshm_check_shmdt_t		mpo_sysvshm_check_shmdt;
929179da74eSRobert Watson 	mpo_sysvshm_check_shmget_t		mpo_sysvshm_check_shmget;
930179da74eSRobert Watson 	mpo_sysvshm_cleanup_t			mpo_sysvshm_cleanup;
931179da74eSRobert Watson 	mpo_sysvshm_create_t			mpo_sysvshm_create;
932179da74eSRobert Watson 	mpo_sysvshm_destroy_label_t		mpo_sysvshm_destroy_label;
933179da74eSRobert Watson 	mpo_sysvshm_init_label_t		mpo_sysvshm_init_label;
934179da74eSRobert Watson 
935179da74eSRobert Watson 	mpo_thread_userret_t			mpo_thread_userret;
936179da74eSRobert Watson 
93730d239bcSRobert Watson 	mpo_vnode_check_access_t		mpo_vnode_check_access;
93830d239bcSRobert Watson 	mpo_vnode_check_chdir_t			mpo_vnode_check_chdir;
93930d239bcSRobert Watson 	mpo_vnode_check_chroot_t		mpo_vnode_check_chroot;
94030d239bcSRobert Watson 	mpo_vnode_check_create_t		mpo_vnode_check_create;
94130d239bcSRobert Watson 	mpo_vnode_check_deleteacl_t		mpo_vnode_check_deleteacl;
94230d239bcSRobert Watson 	mpo_vnode_check_deleteextattr_t		mpo_vnode_check_deleteextattr;
94330d239bcSRobert Watson 	mpo_vnode_check_exec_t			mpo_vnode_check_exec;
94430d239bcSRobert Watson 	mpo_vnode_check_getacl_t		mpo_vnode_check_getacl;
94530d239bcSRobert Watson 	mpo_vnode_check_getextattr_t		mpo_vnode_check_getextattr;
94630d239bcSRobert Watson 	mpo_vnode_check_link_t			mpo_vnode_check_link;
94730d239bcSRobert Watson 	mpo_vnode_check_listextattr_t		mpo_vnode_check_listextattr;
94830d239bcSRobert Watson 	mpo_vnode_check_lookup_t		mpo_vnode_check_lookup;
94930d239bcSRobert Watson 	mpo_vnode_check_mmap_t			mpo_vnode_check_mmap;
95030d239bcSRobert Watson 	mpo_vnode_check_mmap_downgrade_t	mpo_vnode_check_mmap_downgrade;
95130d239bcSRobert Watson 	mpo_vnode_check_mprotect_t		mpo_vnode_check_mprotect;
95230d239bcSRobert Watson 	mpo_vnode_check_open_t			mpo_vnode_check_open;
95330d239bcSRobert Watson 	mpo_vnode_check_poll_t			mpo_vnode_check_poll;
95430d239bcSRobert Watson 	mpo_vnode_check_read_t			mpo_vnode_check_read;
95530d239bcSRobert Watson 	mpo_vnode_check_readdir_t		mpo_vnode_check_readdir;
95630d239bcSRobert Watson 	mpo_vnode_check_readlink_t		mpo_vnode_check_readlink;
95730d239bcSRobert Watson 	mpo_vnode_check_relabel_t		mpo_vnode_check_relabel;
95830d239bcSRobert Watson 	mpo_vnode_check_rename_from_t		mpo_vnode_check_rename_from;
95930d239bcSRobert Watson 	mpo_vnode_check_rename_to_t		mpo_vnode_check_rename_to;
96030d239bcSRobert Watson 	mpo_vnode_check_revoke_t		mpo_vnode_check_revoke;
96130d239bcSRobert Watson 	mpo_vnode_check_setacl_t		mpo_vnode_check_setacl;
96230d239bcSRobert Watson 	mpo_vnode_check_setextattr_t		mpo_vnode_check_setextattr;
96330d239bcSRobert Watson 	mpo_vnode_check_setflags_t		mpo_vnode_check_setflags;
96430d239bcSRobert Watson 	mpo_vnode_check_setmode_t		mpo_vnode_check_setmode;
96530d239bcSRobert Watson 	mpo_vnode_check_setowner_t		mpo_vnode_check_setowner;
96630d239bcSRobert Watson 	mpo_vnode_check_setutimes_t		mpo_vnode_check_setutimes;
96730d239bcSRobert Watson 	mpo_vnode_check_stat_t			mpo_vnode_check_stat;
96830d239bcSRobert Watson 	mpo_vnode_check_unlink_t		mpo_vnode_check_unlink;
96930d239bcSRobert Watson 	mpo_vnode_check_write_t			mpo_vnode_check_write;
970179da74eSRobert Watson 	mpo_vnode_associate_extattr_t		mpo_vnode_associate_extattr;
971179da74eSRobert Watson 	mpo_vnode_associate_singlelabel_t	mpo_vnode_associate_singlelabel;
972179da74eSRobert Watson 	mpo_vnode_destroy_label_t		mpo_vnode_destroy_label;
973179da74eSRobert Watson 	mpo_vnode_copy_label_t			mpo_vnode_copy_label;
974179da74eSRobert Watson 	mpo_vnode_create_extattr_t		mpo_vnode_create_extattr;
975179da74eSRobert Watson 	mpo_vnode_execve_transition_t		mpo_vnode_execve_transition;
976179da74eSRobert Watson 	mpo_vnode_execve_will_transition_t	mpo_vnode_execve_will_transition;
977179da74eSRobert Watson 	mpo_vnode_externalize_label_t		mpo_vnode_externalize_label;
978179da74eSRobert Watson 	mpo_vnode_init_label_t			mpo_vnode_init_label;
979179da74eSRobert Watson 	mpo_vnode_internalize_label_t		mpo_vnode_internalize_label;
980179da74eSRobert Watson 	mpo_vnode_relabel_t			mpo_vnode_relabel;
981179da74eSRobert Watson 	mpo_vnode_setlabel_extattr_t		mpo_vnode_setlabel_extattr;
982ddcdf265SRobert Watson };
983ddcdf265SRobert Watson 
9843459e1d2SRobert Watson /*
9853459e1d2SRobert Watson  * struct mac_policy_conf is the registration structure for policies, and is
9863459e1d2SRobert Watson  * provided to the MAC Framework using MAC_POLICY_SET() to invoke a SYSINIT
9873459e1d2SRobert Watson  * to register the policy.  In general, the fields are immutable, with the
9883459e1d2SRobert Watson  * exception of the "security field", run-time flags, and policy list entry,
9893459e1d2SRobert Watson  * which are managed by the MAC Framework.  Be careful when modifying this
9903459e1d2SRobert Watson  * structure, as its layout is statically compiled into all policies.
9913459e1d2SRobert Watson  */
992ddcdf265SRobert Watson struct mac_policy_conf {
993ddcdf265SRobert Watson 	char				*mpc_name;	/* policy name */
994ddcdf265SRobert Watson 	char				*mpc_fullname;	/* policy full name */
995ddcdf265SRobert Watson 	struct mac_policy_ops		*mpc_ops;	/* policy operations */
996ddcdf265SRobert Watson 	int				 mpc_loadtime_flags;	/* flags */
997ddcdf265SRobert Watson 	int				*mpc_field_off; /* security field */
998ddcdf265SRobert Watson 	int				 mpc_runtime_flags; /* flags */
9996356dba0SRobert Watson 	int				 _mpc_spare1;	/* Spare. */
10006356dba0SRobert Watson 	uint64_t			 _mpc_spare2;	/* Spare. */
10019162f64bSRobert Watson 	uint64_t			 _mpc_spare3;	/* Spare. */
10029162f64bSRobert Watson 	void				*_mpc_spare4;	/* Spare. */
1003ddcdf265SRobert Watson 	LIST_ENTRY(mac_policy_conf)	 mpc_list;	/* global list */
1004ddcdf265SRobert Watson };
1005ddcdf265SRobert Watson 
1006ddcdf265SRobert Watson /* Flags for the mpc_loadtime_flags field. */
1007ddcdf265SRobert Watson #define	MPC_LOADTIME_FLAG_NOTLATE	0x00000001
1008ddcdf265SRobert Watson #define	MPC_LOADTIME_FLAG_UNLOADOK	0x00000002
1009ddcdf265SRobert Watson 
1010ddcdf265SRobert Watson /* Flags for the mpc_runtime_flags field. */
1011ddcdf265SRobert Watson #define	MPC_RUNTIME_FLAG_REGISTERED	0x00000001
1012ddcdf265SRobert Watson 
1013be23ba9aSRobert Watson /*-
1014be23ba9aSRobert Watson  * The TrustedBSD MAC Framework has a major version number, MAC_VERSION,
1015be23ba9aSRobert Watson  * which defines the ABI of the Framework present in the kernel (and depended
1016be23ba9aSRobert Watson  * on by policy modules compiled against that kernel).  Currently,
1017be23ba9aSRobert Watson  * MAC_POLICY_SET() requires that the kernel and module ABI version numbers
1018be23ba9aSRobert Watson  * exactly match.  The following major versions have been defined to date:
1019be23ba9aSRobert Watson  *
1020be23ba9aSRobert Watson  *   MAC version             FreeBSD versions
1021be23ba9aSRobert Watson  *   1                       5.x
1022be23ba9aSRobert Watson  *   2                       6.x
1023be23ba9aSRobert Watson  *   3                       7.x
10241cb99cfcSRobert Watson  *   4                       8.x
1025*50315501SAllan Jude  *   5                       14.x
1026be23ba9aSRobert Watson  */
1027*50315501SAllan Jude #define	MAC_VERSION	5
1028be23ba9aSRobert Watson 
10299162f64bSRobert Watson #define	MAC_POLICY_SET(mpops, mpname, mpfullname, mpflags, privdata_wanted) \
1030ddcdf265SRobert Watson 	static struct mac_policy_conf mpname##_mac_policy_conf = {	\
10316356dba0SRobert Watson 		.mpc_name = #mpname,					\
10326356dba0SRobert Watson 		.mpc_fullname = mpfullname,				\
10336356dba0SRobert Watson 		.mpc_ops = mpops,					\
10346356dba0SRobert Watson 		.mpc_loadtime_flags = mpflags,				\
10356356dba0SRobert Watson 		.mpc_field_off = privdata_wanted,			\
1036ddcdf265SRobert Watson 	};								\
1037ddcdf265SRobert Watson 	static moduledata_t mpname##_mod = {				\
1038ddcdf265SRobert Watson 		#mpname,						\
1039ddcdf265SRobert Watson 		mac_policy_modevent,					\
1040ddcdf265SRobert Watson 		&mpname##_mac_policy_conf				\
1041ddcdf265SRobert Watson 	};								\
1042be23ba9aSRobert Watson 	MODULE_DEPEND(mpname, kernel_mac_support, MAC_VERSION,		\
1043be23ba9aSRobert Watson 	    MAC_VERSION, MAC_VERSION);					\
1044ddcdf265SRobert Watson 	DECLARE_MODULE(mpname, mpname##_mod, SI_SUB_MAC_POLICY,		\
1045ddcdf265SRobert Watson 	    SI_ORDER_MIDDLE)
1046ddcdf265SRobert Watson 
1047ddcdf265SRobert Watson int	mac_policy_modevent(module_t mod, int type, void *data);
1048ddcdf265SRobert Watson 
10498425ae12SRobert Watson /*
10508425ae12SRobert Watson  * Policy interface to map a struct label pointer to per-policy data.
10518425ae12SRobert Watson  * Typically, policies wrap this in their own accessor macro that casts a
10520142affcSRobert Watson  * uintptr_t to a policy-specific data type.
10538425ae12SRobert Watson  */
10540142affcSRobert Watson intptr_t	mac_label_get(struct label *l, int slot);
10550142affcSRobert Watson void		mac_label_set(struct label *l, int slot, intptr_t v);
1056ddcdf265SRobert Watson 
1057646a9f80SRobert Watson #endif /* !_SECURITY_MAC_MAC_POLICY_H_ */
1058