1ddcdf265SRobert Watson /*- 29b6dd12eSRobert Watson * Copyright (c) 1999-2002, 2007-2011 Robert N. M. Watson 37f53207bSRobert Watson * Copyright (c) 2001-2005 Networks Associates Technology, Inc. 41d82b391SRobert Watson * Copyright (c) 2005-2006 SPARTA, Inc. 56356dba0SRobert Watson * Copyright (c) 2008 Apple Inc. 6ddcdf265SRobert Watson * All rights reserved. 7ddcdf265SRobert Watson * 8ddcdf265SRobert Watson * This software was developed by Robert Watson for the TrustedBSD Project. 9ddcdf265SRobert Watson * 106201265bSRobert Watson * This software was developed for the FreeBSD Project in part by Network 116201265bSRobert Watson * Associates Laboratories, the Security Research Division of Network 126201265bSRobert Watson * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), 136201265bSRobert Watson * as part of the DARPA CHATS research program. 14ddcdf265SRobert Watson * 15d26dd2d9SRobert Watson * This software was enhanced by SPARTA ISSO under SPAWAR contract 16d26dd2d9SRobert Watson * N66001-04-C-6019 ("SEFOS"). 17d26dd2d9SRobert Watson * 186f6174a7SRobert Watson * This software was developed at the University of Cambridge Computer 196f6174a7SRobert Watson * Laboratory with support from a grant from Google, Inc. 206f6174a7SRobert Watson * 21ddcdf265SRobert Watson * Redistribution and use in source and binary forms, with or without 22ddcdf265SRobert Watson * modification, are permitted provided that the following conditions 23ddcdf265SRobert Watson * are met: 24ddcdf265SRobert Watson * 1. Redistributions of source code must retain the above copyright 25ddcdf265SRobert Watson * notice, this list of conditions and the following disclaimer. 26ddcdf265SRobert Watson * 2. Redistributions in binary form must reproduce the above copyright 27ddcdf265SRobert Watson * notice, this list of conditions and the following disclaimer in the 28ddcdf265SRobert Watson * documentation and/or other materials provided with the distribution. 29ddcdf265SRobert Watson * 30ddcdf265SRobert Watson * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 31ddcdf265SRobert Watson * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 32ddcdf265SRobert Watson * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 33ddcdf265SRobert Watson * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 34ddcdf265SRobert Watson * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 35ddcdf265SRobert Watson * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 36ddcdf265SRobert Watson * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 37ddcdf265SRobert Watson * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 38ddcdf265SRobert Watson * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 39ddcdf265SRobert Watson * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 40ddcdf265SRobert Watson * SUCH DAMAGE. 41ddcdf265SRobert Watson * 42ddcdf265SRobert Watson * $FreeBSD$ 43ddcdf265SRobert Watson */ 44ddcdf265SRobert Watson /* 45ddcdf265SRobert Watson * Kernel interface for MAC policy modules. 46ddcdf265SRobert Watson */ 47646a9f80SRobert Watson #ifndef _SECURITY_MAC_MAC_POLICY_H_ 48646a9f80SRobert Watson #define _SECURITY_MAC_MAC_POLICY_H_ 49ddcdf265SRobert Watson 50c96ae196SRobert Watson #ifndef _KERNEL 51c96ae196SRobert Watson #error "no user-serviceable parts inside" 52c96ae196SRobert Watson #endif 53c96ae196SRobert Watson 54ddcdf265SRobert Watson /*- 55ddcdf265SRobert Watson * Pluggable access control policy definition structure. 56ddcdf265SRobert Watson * 576baacecdSRobert Watson * List of operations that are performed as part of the implementation of a 586baacecdSRobert Watson * MAC policy. Policy implementors declare operations with a mac_policy_ops 596baacecdSRobert Watson * structure, and using the MAC_POLICY_SET() macro. If an entry point is not 606baacecdSRobert Watson * declared, then then the policy will be ignored during evaluation of that 616baacecdSRobert Watson * event or check. 62ddcdf265SRobert Watson * 63ddcdf265SRobert Watson * Operations are sorted first by general class of operation, then 64ddcdf265SRobert Watson * alphabetically. 65ddcdf265SRobert Watson */ 66aed55708SRobert Watson #include <sys/acl.h> /* XXX acl_type_t */ 6715bc6b2bSEdward Tomasz Napierala #include <sys/types.h> /* XXX accmode_t */ 68aed55708SRobert Watson 692449b9e5SMitchell Horne #include <ddb/ddb.h> /* XXX db_expr_t */ 702449b9e5SMitchell Horne 7116fd30bdSRobert Watson struct acl; 7218717f69SRobert Watson struct auditinfo; 73343cc83eSPeter Wemm struct auditinfo_addr; 74f47cb886SRobert Watson struct bpf_d; 7517451386SRobert Watson struct cdev; 7616fd30bdSRobert Watson struct componentname; 772449b9e5SMitchell Horne struct db_command; 7816fd30bdSRobert Watson struct devfs_dirent; 79f47cb886SRobert Watson struct ifnet; 80f47cb886SRobert Watson struct image_params; 81a557af22SRobert Watson struct inpcb; 824b908c8bSRobert Watson struct ip6q; 8316fd30bdSRobert Watson struct ipq; 842449b9e5SMitchell Horne struct kdb_dbbe; 8552648411SRobert Watson struct ksem; 8616fd30bdSRobert Watson struct label; 87ddcdf265SRobert Watson struct mac_policy_conf; 8816fd30bdSRobert Watson struct mbuf; 8916fd30bdSRobert Watson struct mount; 90198e7d90SRobert Watson struct msg; 9142726d8aSRobert Watson struct msqid_kernel; 924795b82cSRobert Watson struct pipepair; 93f97e834bSRobert Watson struct proc; 94f51e5803SRobert Watson struct sbuf; 9542726d8aSRobert Watson struct semid_kernel; 968e38aeffSJohn Baldwin struct shmfd; 9742726d8aSRobert Watson struct shmid_kernel; 98f97e834bSRobert Watson struct sockaddr; 9916fd30bdSRobert Watson struct socket; 10063dba32bSPawel Jakub Dawidek struct sysctl_oid; 10163dba32bSPawel Jakub Dawidek struct sysctl_req; 102f97e834bSRobert Watson struct thread; 10316fd30bdSRobert Watson struct ucred; 104f47cb886SRobert Watson struct vattr; 10516fd30bdSRobert Watson struct vnode; 1061d82b391SRobert Watson 107ddcdf265SRobert Watson /* 108ddcdf265SRobert Watson * Policy module operations. 109ddcdf265SRobert Watson */ 1101d82b391SRobert Watson typedef void (*mpo_destroy_t)(struct mac_policy_conf *mpc); 1111d82b391SRobert Watson typedef void (*mpo_init_t)(struct mac_policy_conf *mpc); 112ddcdf265SRobert Watson 113ddcdf265SRobert Watson /* 1143459e1d2SRobert Watson * General policy-directed security system call so that policies may 1156baacecdSRobert Watson * implement new services without reserving explicit system call numbers. 11627f2eac7SRobert Watson */ 1171d82b391SRobert Watson typedef int (*mpo_syscall_t)(struct thread *td, int call, void *arg); 1181d82b391SRobert Watson 1191d82b391SRobert Watson /* 1201d82b391SRobert Watson * Place-holder function pointers for ABI-compatibility purposes. 1211d82b391SRobert Watson */ 1221d82b391SRobert Watson typedef void (*mpo_placeholder_t)(void); 12327f2eac7SRobert Watson 12427f2eac7SRobert Watson /* 125179da74eSRobert Watson * Operations sorted alphabetically by primary object type and then method. 126ddcdf265SRobert Watson */ 127179da74eSRobert Watson typedef int (*mpo_bpfdesc_check_receive_t)(struct bpf_d *d, 128179da74eSRobert Watson struct label *dlabel, struct ifnet *ifp, 129179da74eSRobert Watson struct label *ifplabel); 130179da74eSRobert Watson typedef void (*mpo_bpfdesc_create_t)(struct ucred *cred, 131179da74eSRobert Watson struct bpf_d *d, struct label *dlabel); 132179da74eSRobert Watson typedef void (*mpo_bpfdesc_create_mbuf_t)(struct bpf_d *d, 133179da74eSRobert Watson struct label *dlabel, struct mbuf *m, 134179da74eSRobert Watson struct label *mlabel); 13530d239bcSRobert Watson typedef void (*mpo_bpfdesc_destroy_label_t)(struct label *label); 136179da74eSRobert Watson typedef void (*mpo_bpfdesc_init_label_t)(struct label *label); 137179da74eSRobert Watson 138212ab0cfSRobert Watson typedef void (*mpo_cred_associate_nfsd_t)(struct ucred *cred); 139179da74eSRobert Watson typedef int (*mpo_cred_check_relabel_t)(struct ucred *cred, 140179da74eSRobert Watson struct label *newlabel); 1416f6174a7SRobert Watson typedef int (*mpo_cred_check_setaudit_t)(struct ucred *cred, 1426f6174a7SRobert Watson struct auditinfo *ai); 1436f6174a7SRobert Watson typedef int (*mpo_cred_check_setaudit_addr_t)(struct ucred *cred, 1446f6174a7SRobert Watson struct auditinfo_addr *aia); 1456f6174a7SRobert Watson typedef int (*mpo_cred_check_setauid_t)(struct ucred *cred, uid_t auid); 1466f6174a7SRobert Watson typedef int (*mpo_cred_check_setegid_t)(struct ucred *cred, gid_t egid); 1476f6174a7SRobert Watson typedef int (*mpo_cred_check_seteuid_t)(struct ucred *cred, uid_t euid); 1486f6174a7SRobert Watson typedef int (*mpo_cred_check_setgid_t)(struct ucred *cred, gid_t gid); 1496f6174a7SRobert Watson typedef int (*mpo_cred_check_setgroups_t)(struct ucred *cred, int ngroups, 1506f6174a7SRobert Watson gid_t *gidset); 1516f6174a7SRobert Watson typedef int (*mpo_cred_check_setregid_t)(struct ucred *cred, gid_t rgid, 1526f6174a7SRobert Watson gid_t egid); 1536f6174a7SRobert Watson typedef int (*mpo_cred_check_setresgid_t)(struct ucred *cred, gid_t rgid, 1546f6174a7SRobert Watson gid_t egid, gid_t sgid); 1556f6174a7SRobert Watson typedef int (*mpo_cred_check_setresuid_t)(struct ucred *cred, uid_t ruid, 1566f6174a7SRobert Watson uid_t euid, uid_t suid); 1576f6174a7SRobert Watson typedef int (*mpo_cred_check_setreuid_t)(struct ucred *cred, uid_t ruid, 1586f6174a7SRobert Watson uid_t euid); 1596f6174a7SRobert Watson typedef int (*mpo_cred_check_setuid_t)(struct ucred *cred, uid_t uid); 160179da74eSRobert Watson typedef int (*mpo_cred_check_visible_t)(struct ucred *cr1, 161179da74eSRobert Watson struct ucred *cr2); 16230d239bcSRobert Watson typedef void (*mpo_cred_copy_label_t)(struct label *src, 16356d9e932SRobert Watson struct label *dest); 164212ab0cfSRobert Watson typedef void (*mpo_cred_create_init_t)(struct ucred *cred); 165212ab0cfSRobert Watson typedef void (*mpo_cred_create_swapper_t)(struct ucred *cred); 166179da74eSRobert Watson typedef void (*mpo_cred_destroy_label_t)(struct label *label); 16730d239bcSRobert Watson typedef int (*mpo_cred_externalize_label_t)(struct label *label, 168f51e5803SRobert Watson char *element_name, struct sbuf *sb, int *claimed); 169179da74eSRobert Watson typedef void (*mpo_cred_init_label_t)(struct label *label); 17030d239bcSRobert Watson typedef int (*mpo_cred_internalize_label_t)(struct label *label, 171475b9d0aSRobert Watson char *element_name, char *element_data, int *claimed); 172179da74eSRobert Watson typedef void (*mpo_cred_relabel_t)(struct ucred *cred, 173179da74eSRobert Watson struct label *newlabel); 174ddcdf265SRobert Watson 1752449b9e5SMitchell Horne typedef int (*mpo_ddb_command_register_t)(struct db_command_table *table, 1762449b9e5SMitchell Horne struct db_command *cmd); 1772449b9e5SMitchell Horne typedef int (*mpo_ddb_command_exec_t)(struct db_command *cmd, 1782449b9e5SMitchell Horne db_expr_t addr, bool have_addr, db_expr_t count, 1792449b9e5SMitchell Horne char *modif); 1802449b9e5SMitchell Horne 18130d239bcSRobert Watson typedef void (*mpo_devfs_create_device_t)(struct ucred *cred, 182d26dd2d9SRobert Watson struct mount *mp, struct cdev *dev, 18326ae2b86SRobert Watson struct devfs_dirent *de, struct label *delabel); 18430d239bcSRobert Watson typedef void (*mpo_devfs_create_directory_t)(struct mount *mp, 1851d82b391SRobert Watson char *dirname, int dirnamelen, struct devfs_dirent *de, 18626ae2b86SRobert Watson struct label *delabel); 18730d239bcSRobert Watson typedef void (*mpo_devfs_create_symlink_t)(struct ucred *cred, 188990b4b2dSRobert Watson struct mount *mp, struct devfs_dirent *dd, 189990b4b2dSRobert Watson struct label *ddlabel, struct devfs_dirent *de, 190990b4b2dSRobert Watson struct label *delabel); 191179da74eSRobert Watson typedef void (*mpo_devfs_destroy_label_t)(struct label *label); 192179da74eSRobert Watson typedef void (*mpo_devfs_init_label_t)(struct label *label); 19330d239bcSRobert Watson typedef void (*mpo_devfs_update_t)(struct mount *mp, 19426ae2b86SRobert Watson struct devfs_dirent *de, struct label *delabel, 19526ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 196179da74eSRobert Watson typedef void (*mpo_devfs_vnode_associate_t)(struct mount *mp, 197179da74eSRobert Watson struct label *mplabel, struct devfs_dirent *de, 198179da74eSRobert Watson struct label *delabel, struct vnode *vp, 199179da74eSRobert Watson struct label *vplabel); 200ddcdf265SRobert Watson 201179da74eSRobert Watson typedef int (*mpo_ifnet_check_relabel_t)(struct ucred *cred, 202179da74eSRobert Watson struct ifnet *ifp, struct label *ifplabel, 203179da74eSRobert Watson struct label *newlabel); 204179da74eSRobert Watson typedef int (*mpo_ifnet_check_transmit_t)(struct ifnet *ifp, 205179da74eSRobert Watson struct label *ifplabel, struct mbuf *m, 20626ae2b86SRobert Watson struct label *mlabel); 207179da74eSRobert Watson typedef void (*mpo_ifnet_copy_label_t)(struct label *src, 208179da74eSRobert Watson struct label *dest); 20930d239bcSRobert Watson typedef void (*mpo_ifnet_create_t)(struct ifnet *ifp, 21026ae2b86SRobert Watson struct label *ifplabel); 211179da74eSRobert Watson typedef void (*mpo_ifnet_create_mbuf_t)(struct ifnet *ifp, 212179da74eSRobert Watson struct label *ifplabel, struct mbuf *m, 213179da74eSRobert Watson struct label *mlabel); 214179da74eSRobert Watson typedef void (*mpo_ifnet_destroy_label_t)(struct label *label); 215179da74eSRobert Watson typedef int (*mpo_ifnet_externalize_label_t)(struct label *label, 216179da74eSRobert Watson char *element_name, struct sbuf *sb, int *claimed); 217179da74eSRobert Watson typedef void (*mpo_ifnet_init_label_t)(struct label *label); 218179da74eSRobert Watson typedef int (*mpo_ifnet_internalize_label_t)(struct label *label, 219179da74eSRobert Watson char *element_name, char *element_data, int *claimed); 220179da74eSRobert Watson typedef void (*mpo_ifnet_relabel_t)(struct ucred *cred, struct ifnet *ifp, 221179da74eSRobert Watson struct label *ifplabel, struct label *newlabel); 222179da74eSRobert Watson 223179da74eSRobert Watson typedef int (*mpo_inpcb_check_deliver_t)(struct inpcb *inp, 224179da74eSRobert Watson struct label *inplabel, struct mbuf *m, 225179da74eSRobert Watson struct label *mlabel); 22637ee7293SBjoern A. Zeeb typedef int (*mpo_inpcb_check_visible_t)(struct ucred *cred, 22737ee7293SBjoern A. Zeeb struct inpcb *inp, struct label *inplabel); 22830d239bcSRobert Watson typedef void (*mpo_inpcb_create_t)(struct socket *so, 229a557af22SRobert Watson struct label *solabel, struct inpcb *inp, 230a557af22SRobert Watson struct label *inplabel); 23130d239bcSRobert Watson typedef void (*mpo_inpcb_create_mbuf_t)(struct inpcb *inp, 2322d92ec98SRobert Watson struct label *inplabel, struct mbuf *m, 2332d92ec98SRobert Watson struct label *mlabel); 234179da74eSRobert Watson typedef void (*mpo_inpcb_destroy_label_t)(struct label *label); 235179da74eSRobert Watson typedef int (*mpo_inpcb_init_label_t)(struct label *label, int flag); 236179da74eSRobert Watson typedef void (*mpo_inpcb_sosetlabel_t)(struct socket *so, 237179da74eSRobert Watson struct label *label, struct inpcb *inp, 238179da74eSRobert Watson struct label *inplabel); 239179da74eSRobert Watson 2404b908c8bSRobert Watson typedef void (*mpo_ip6q_create_t)(struct mbuf *m, struct label *mlabel, 2414b908c8bSRobert Watson struct ip6q *q6, struct label *q6label); 2424b908c8bSRobert Watson typedef void (*mpo_ip6q_destroy_label_t)(struct label *label); 2434b908c8bSRobert Watson typedef int (*mpo_ip6q_init_label_t)(struct label *label, int flag); 2444b908c8bSRobert Watson typedef int (*mpo_ip6q_match_t)(struct mbuf *m, struct label *mlabel, 2454b908c8bSRobert Watson struct ip6q *q6, struct label *q6label); 2464b908c8bSRobert Watson typedef void (*mpo_ip6q_reassemble)(struct ip6q *q6, struct label *q6label, 2474b908c8bSRobert Watson struct mbuf *m, struct label *mlabel); 2484b908c8bSRobert Watson typedef void (*mpo_ip6q_update_t)(struct mbuf *m, struct label *mlabel, 2494b908c8bSRobert Watson struct ip6q *q6, struct label *q6label); 2504b908c8bSRobert Watson 251179da74eSRobert Watson typedef void (*mpo_ipq_create_t)(struct mbuf *m, struct label *mlabel, 25237f44cb4SRobert Watson struct ipq *q, struct label *qlabel); 253179da74eSRobert Watson typedef void (*mpo_ipq_destroy_label_t)(struct label *label); 254179da74eSRobert Watson typedef int (*mpo_ipq_init_label_t)(struct label *label, int flag); 255179da74eSRobert Watson typedef int (*mpo_ipq_match_t)(struct mbuf *m, struct label *mlabel, 25637f44cb4SRobert Watson struct ipq *q, struct label *qlabel); 25737f44cb4SRobert Watson typedef void (*mpo_ipq_reassemble)(struct ipq *q, struct label *qlabel, 25837f44cb4SRobert Watson struct mbuf *m, struct label *mlabel); 259179da74eSRobert Watson typedef void (*mpo_ipq_update_t)(struct mbuf *m, struct label *mlabel, 26037f44cb4SRobert Watson struct ipq *q, struct label *qlabel); 261179da74eSRobert Watson 2622449b9e5SMitchell Horne typedef int (*mpo_kdb_check_backend_t)(struct kdb_dbbe *be); 2632449b9e5SMitchell Horne 264179da74eSRobert Watson typedef int (*mpo_kenv_check_dump_t)(struct ucred *cred); 265179da74eSRobert Watson typedef int (*mpo_kenv_check_get_t)(struct ucred *cred, char *name); 266179da74eSRobert Watson typedef int (*mpo_kenv_check_set_t)(struct ucred *cred, char *name, 267179da74eSRobert Watson char *value); 268179da74eSRobert Watson typedef int (*mpo_kenv_check_unset_t)(struct ucred *cred, char *name); 269179da74eSRobert Watson 270179da74eSRobert Watson typedef int (*mpo_kld_check_load_t)(struct ucred *cred, struct vnode *vp, 271179da74eSRobert Watson struct label *vplabel); 272179da74eSRobert Watson typedef int (*mpo_kld_check_stat_t)(struct ucred *cred); 273179da74eSRobert Watson 274179da74eSRobert Watson typedef void (*mpo_mbuf_copy_label_t)(struct label *src, 275179da74eSRobert Watson struct label *dest); 276179da74eSRobert Watson typedef void (*mpo_mbuf_destroy_label_t)(struct label *label); 277179da74eSRobert Watson typedef int (*mpo_mbuf_init_label_t)(struct label *label, int flag); 278179da74eSRobert Watson 279179da74eSRobert Watson typedef int (*mpo_mount_check_stat_t)(struct ucred *cred, 280179da74eSRobert Watson struct mount *mp, struct label *mplabel); 281179da74eSRobert Watson typedef void (*mpo_mount_create_t)(struct ucred *cred, struct mount *mp, 282179da74eSRobert Watson struct label *mplabel); 283179da74eSRobert Watson typedef void (*mpo_mount_destroy_label_t)(struct label *label); 284179da74eSRobert Watson typedef void (*mpo_mount_init_label_t)(struct label *label); 285179da74eSRobert Watson 286b9b0dac3SRobert Watson typedef void (*mpo_netinet_arp_send_t)(struct ifnet *ifp, 287b9b0dac3SRobert Watson struct label *ifplabel, struct mbuf *m, 288b9b0dac3SRobert Watson struct label *mlabel); 289a13e21f7SRobert Watson typedef void (*mpo_netinet_firewall_reply_t)(struct mbuf *mrecv, 290a13e21f7SRobert Watson struct label *mrecvlabel, struct mbuf *msend, 291a13e21f7SRobert Watson struct label *msendlabel); 29286407646SRobert Watson typedef void (*mpo_netinet_firewall_send_t)(struct mbuf *m, 29386407646SRobert Watson struct label *mlabel); 294179da74eSRobert Watson typedef void (*mpo_netinet_fragment_t)(struct mbuf *m, 295179da74eSRobert Watson struct label *mlabel, struct mbuf *frag, 296179da74eSRobert Watson struct label *fraglabel); 297a13e21f7SRobert Watson typedef void (*mpo_netinet_icmp_reply_t)(struct mbuf *mrecv, 298a13e21f7SRobert Watson struct label *mrecvlabel, struct mbuf *msend, 299a13e21f7SRobert Watson struct label *msendlabel); 300a13e21f7SRobert Watson typedef void (*mpo_netinet_icmp_replyinplace_t)(struct mbuf *m, 301eb8c7f99SRobert Watson struct label *mlabel); 302b9b0dac3SRobert Watson typedef void (*mpo_netinet_igmp_send_t)(struct ifnet *ifp, 303b9b0dac3SRobert Watson struct label *ifplabel, struct mbuf *m, 304b9b0dac3SRobert Watson struct label *mlabel); 30530d239bcSRobert Watson typedef void (*mpo_netinet_tcp_reply_t)(struct mbuf *m, 3061d82b391SRobert Watson struct label *mlabel); 307ddcdf265SRobert Watson 308b9b0dac3SRobert Watson typedef void (*mpo_netinet6_nd6_send_t)(struct ifnet *ifp, 309b9b0dac3SRobert Watson struct label *ifplabel, struct mbuf *m, 310b9b0dac3SRobert Watson struct label *mlabel); 311b9b0dac3SRobert Watson 31230d239bcSRobert Watson typedef int (*mpo_pipe_check_ioctl_t)(struct ucred *cred, 31326ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel, 3144795b82cSRobert Watson unsigned long cmd, void *data); 31530d239bcSRobert Watson typedef int (*mpo_pipe_check_poll_t)(struct ucred *cred, 31626ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel); 31730d239bcSRobert Watson typedef int (*mpo_pipe_check_read_t)(struct ucred *cred, 31826ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel); 31930d239bcSRobert Watson typedef int (*mpo_pipe_check_relabel_t)(struct ucred *cred, 32026ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel, 321ddcdf265SRobert Watson struct label *newlabel); 32230d239bcSRobert Watson typedef int (*mpo_pipe_check_stat_t)(struct ucred *cred, 32326ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel); 32430d239bcSRobert Watson typedef int (*mpo_pipe_check_write_t)(struct ucred *cred, 32526ae2b86SRobert Watson struct pipepair *pp, struct label *pplabel); 326179da74eSRobert Watson typedef void (*mpo_pipe_copy_label_t)(struct label *src, 327179da74eSRobert Watson struct label *dest); 328179da74eSRobert Watson typedef void (*mpo_pipe_create_t)(struct ucred *cred, struct pipepair *pp, 329179da74eSRobert Watson struct label *pplabel); 330179da74eSRobert Watson typedef void (*mpo_pipe_destroy_label_t)(struct label *label); 331179da74eSRobert Watson typedef int (*mpo_pipe_externalize_label_t)(struct label *label, 332179da74eSRobert Watson char *element_name, struct sbuf *sb, int *claimed); 333179da74eSRobert Watson typedef void (*mpo_pipe_init_label_t)(struct label *label); 334179da74eSRobert Watson typedef int (*mpo_pipe_internalize_label_t)(struct label *label, 335179da74eSRobert Watson char *element_name, char *element_data, int *claimed); 336179da74eSRobert Watson typedef void (*mpo_pipe_relabel_t)(struct ucred *cred, struct pipepair *pp, 337179da74eSRobert Watson struct label *oldlabel, struct label *newlabel); 338179da74eSRobert Watson 3396bc1e9cdSJohn Baldwin typedef int (*mpo_posixsem_check_getvalue_t)(struct ucred *active_cred, 3406bc1e9cdSJohn Baldwin struct ucred *file_cred, struct ksem *ks, 3416bc1e9cdSJohn Baldwin struct label *kslabel); 34230d239bcSRobert Watson typedef int (*mpo_posixsem_check_open_t)(struct ucred *cred, 343fe09513eSRobert Watson struct ksem *ks, struct label *kslabel); 3446bc1e9cdSJohn Baldwin typedef int (*mpo_posixsem_check_post_t)(struct ucred *active_cred, 3456bc1e9cdSJohn Baldwin struct ucred *file_cred, struct ksem *ks, 3466bc1e9cdSJohn Baldwin struct label *kslabel); 3479c00bb91SKonstantin Belousov typedef int (*mpo_posixsem_check_setmode_t)(struct ucred *cred, 3489c00bb91SKonstantin Belousov struct ksem *ks, struct label *shmlabel, 3499c00bb91SKonstantin Belousov mode_t mode); 3509c00bb91SKonstantin Belousov typedef int (*mpo_posixsem_check_setowner_t)(struct ucred *cred, 3519c00bb91SKonstantin Belousov struct ksem *ks, struct label *shmlabel, 3529c00bb91SKonstantin Belousov uid_t uid, gid_t gid); 3536bc1e9cdSJohn Baldwin typedef int (*mpo_posixsem_check_stat_t)(struct ucred *active_cred, 3546bc1e9cdSJohn Baldwin struct ucred *file_cred, struct ksem *ks, 3556bc1e9cdSJohn Baldwin struct label *kslabel); 35630d239bcSRobert Watson typedef int (*mpo_posixsem_check_unlink_t)(struct ucred *cred, 357fe09513eSRobert Watson struct ksem *ks, struct label *kslabel); 3586bc1e9cdSJohn Baldwin typedef int (*mpo_posixsem_check_wait_t)(struct ucred *active_cred, 3596bc1e9cdSJohn Baldwin struct ucred *file_cred, struct ksem *ks, 3606bc1e9cdSJohn Baldwin struct label *kslabel); 361179da74eSRobert Watson typedef void (*mpo_posixsem_create_t)(struct ucred *cred, 362179da74eSRobert Watson struct ksem *ks, struct label *kslabel); 363179da74eSRobert Watson typedef void (*mpo_posixsem_destroy_label_t)(struct label *label); 364179da74eSRobert Watson typedef void (*mpo_posixsem_init_label_t)(struct label *label); 365179da74eSRobert Watson 3669b6dd12eSRobert Watson typedef int (*mpo_posixshm_check_create_t)(struct ucred *cred, 3679b6dd12eSRobert Watson const char *path); 3688e38aeffSJohn Baldwin typedef int (*mpo_posixshm_check_mmap_t)(struct ucred *cred, 3698e38aeffSJohn Baldwin struct shmfd *shmfd, struct label *shmlabel, int prot, 3708e38aeffSJohn Baldwin int flags); 3718e38aeffSJohn Baldwin typedef int (*mpo_posixshm_check_open_t)(struct ucred *cred, 3729b6dd12eSRobert Watson struct shmfd *shmfd, struct label *shmlabel, 3739b6dd12eSRobert Watson accmode_t accmode); 374940cb0e2SKonstantin Belousov typedef int (*mpo_posixshm_check_read_t)(struct ucred *active_cred, 375940cb0e2SKonstantin Belousov struct ucred *file_cred, struct shmfd *shmfd, 376940cb0e2SKonstantin Belousov struct label *shmlabel); 3779c00bb91SKonstantin Belousov typedef int (*mpo_posixshm_check_setmode_t)(struct ucred *cred, 3789c00bb91SKonstantin Belousov struct shmfd *shmfd, struct label *shmlabel, 3799c00bb91SKonstantin Belousov mode_t mode); 3809c00bb91SKonstantin Belousov typedef int (*mpo_posixshm_check_setowner_t)(struct ucred *cred, 3819c00bb91SKonstantin Belousov struct shmfd *shmfd, struct label *shmlabel, 3829c00bb91SKonstantin Belousov uid_t uid, gid_t gid); 3838e38aeffSJohn Baldwin typedef int (*mpo_posixshm_check_stat_t)(struct ucred *active_cred, 3848e38aeffSJohn Baldwin struct ucred *file_cred, struct shmfd *shmfd, 3858e38aeffSJohn Baldwin struct label *shmlabel); 3868e38aeffSJohn Baldwin typedef int (*mpo_posixshm_check_truncate_t)(struct ucred *active_cred, 3878e38aeffSJohn Baldwin struct ucred *file_cred, struct shmfd *shmfd, 3888e38aeffSJohn Baldwin struct label *shmlabel); 3898e38aeffSJohn Baldwin typedef int (*mpo_posixshm_check_unlink_t)(struct ucred *cred, 3908e38aeffSJohn Baldwin struct shmfd *shmfd, struct label *shmlabel); 391940cb0e2SKonstantin Belousov typedef int (*mpo_posixshm_check_write_t)(struct ucred *active_cred, 392940cb0e2SKonstantin Belousov struct ucred *file_cred, struct shmfd *shmfd, 393940cb0e2SKonstantin Belousov struct label *shmlabel); 3948e38aeffSJohn Baldwin typedef void (*mpo_posixshm_create_t)(struct ucred *cred, 3958e38aeffSJohn Baldwin struct shmfd *shmfd, struct label *shmlabel); 3968e38aeffSJohn Baldwin typedef void (*mpo_posixshm_destroy_label_t)(struct label *label); 3978e38aeffSJohn Baldwin typedef void (*mpo_posixshm_init_label_t)(struct label *label); 3988e38aeffSJohn Baldwin 399179da74eSRobert Watson typedef int (*mpo_priv_check_t)(struct ucred *cred, int priv); 400179da74eSRobert Watson typedef int (*mpo_priv_grant_t)(struct ucred *cred, int priv); 401179da74eSRobert Watson 40230d239bcSRobert Watson typedef int (*mpo_proc_check_debug_t)(struct ucred *cred, 40326ae2b86SRobert Watson struct proc *p); 40430d239bcSRobert Watson typedef int (*mpo_proc_check_sched_t)(struct ucred *cred, 40526ae2b86SRobert Watson struct proc *p); 40630d239bcSRobert Watson typedef int (*mpo_proc_check_signal_t)(struct ucred *cred, 407ddcdf265SRobert Watson struct proc *proc, int signum); 40830d239bcSRobert Watson typedef int (*mpo_proc_check_wait_t)(struct ucred *cred, 409babe9a2bSRobert Watson struct proc *proc); 410179da74eSRobert Watson typedef void (*mpo_proc_destroy_label_t)(struct label *label); 411179da74eSRobert Watson typedef void (*mpo_proc_init_label_t)(struct label *label); 412179da74eSRobert Watson 41330d239bcSRobert Watson typedef int (*mpo_socket_check_accept_t)(struct ucred *cred, 41426ae2b86SRobert Watson struct socket *so, struct label *solabel); 41530d239bcSRobert Watson typedef int (*mpo_socket_check_bind_t)(struct ucred *cred, 41626ae2b86SRobert Watson struct socket *so, struct label *solabel, 41726ae2b86SRobert Watson struct sockaddr *sa); 41830d239bcSRobert Watson typedef int (*mpo_socket_check_connect_t)(struct ucred *cred, 41926ae2b86SRobert Watson struct socket *so, struct label *solabel, 42026ae2b86SRobert Watson struct sockaddr *sa); 42130d239bcSRobert Watson typedef int (*mpo_socket_check_create_t)(struct ucred *cred, int domain, 4226758f88eSRobert Watson int type, int protocol); 42330d239bcSRobert Watson typedef int (*mpo_socket_check_deliver_t)(struct socket *so, 42426ae2b86SRobert Watson struct label *solabel, struct mbuf *m, 42526ae2b86SRobert Watson struct label *mlabel); 42630d239bcSRobert Watson typedef int (*mpo_socket_check_listen_t)(struct ucred *cred, 42726ae2b86SRobert Watson struct socket *so, struct label *solabel); 42830d239bcSRobert Watson typedef int (*mpo_socket_check_poll_t)(struct ucred *cred, 42926ae2b86SRobert Watson struct socket *so, struct label *solabel); 43030d239bcSRobert Watson typedef int (*mpo_socket_check_receive_t)(struct ucred *cred, 43126ae2b86SRobert Watson struct socket *so, struct label *solabel); 43230d239bcSRobert Watson typedef int (*mpo_socket_check_relabel_t)(struct ucred *cred, 43326ae2b86SRobert Watson struct socket *so, struct label *solabel, 434ddcdf265SRobert Watson struct label *newlabel); 43530d239bcSRobert Watson typedef int (*mpo_socket_check_send_t)(struct ucred *cred, 43626ae2b86SRobert Watson struct socket *so, struct label *solabel); 43730d239bcSRobert Watson typedef int (*mpo_socket_check_stat_t)(struct ucred *cred, 43826ae2b86SRobert Watson struct socket *so, struct label *solabel); 43930d239bcSRobert Watson typedef int (*mpo_socket_check_visible_t)(struct ucred *cred, 44026ae2b86SRobert Watson struct socket *so, struct label *solabel); 441179da74eSRobert Watson typedef void (*mpo_socket_copy_label_t)(struct label *src, 442179da74eSRobert Watson struct label *dest); 443179da74eSRobert Watson typedef void (*mpo_socket_create_t)(struct ucred *cred, struct socket *so, 444179da74eSRobert Watson struct label *solabel); 445179da74eSRobert Watson typedef void (*mpo_socket_create_mbuf_t)(struct socket *so, 446179da74eSRobert Watson struct label *solabel, struct mbuf *m, 447179da74eSRobert Watson struct label *mlabel); 448179da74eSRobert Watson typedef void (*mpo_socket_destroy_label_t)(struct label *label); 449179da74eSRobert Watson typedef int (*mpo_socket_externalize_label_t)(struct label *label, 450179da74eSRobert Watson char *element_name, struct sbuf *sb, int *claimed); 451179da74eSRobert Watson typedef int (*mpo_socket_init_label_t)(struct label *label, int flag); 452179da74eSRobert Watson typedef int (*mpo_socket_internalize_label_t)(struct label *label, 453179da74eSRobert Watson char *element_name, char *element_data, int *claimed); 454179da74eSRobert Watson typedef void (*mpo_socket_newconn_t)(struct socket *oldso, 455179da74eSRobert Watson struct label *oldsolabel, struct socket *newso, 456179da74eSRobert Watson struct label *newsolabel); 457179da74eSRobert Watson typedef void (*mpo_socket_relabel_t)(struct ucred *cred, struct socket *so, 458179da74eSRobert Watson struct label *oldlabel, struct label *newlabel); 459179da74eSRobert Watson 460179da74eSRobert Watson typedef void (*mpo_socketpeer_destroy_label_t)(struct label *label); 461179da74eSRobert Watson typedef int (*mpo_socketpeer_externalize_label_t)(struct label *label, 462179da74eSRobert Watson char *element_name, struct sbuf *sb, int *claimed); 463179da74eSRobert Watson typedef int (*mpo_socketpeer_init_label_t)(struct label *label, 464179da74eSRobert Watson int flag); 465179da74eSRobert Watson typedef void (*mpo_socketpeer_set_from_mbuf_t)(struct mbuf *m, 466179da74eSRobert Watson struct label *mlabel, struct socket *so, 467179da74eSRobert Watson struct label *sopeerlabel); 468179da74eSRobert Watson typedef void (*mpo_socketpeer_set_from_socket_t)(struct socket *oldso, 469179da74eSRobert Watson struct label *oldsolabel, struct socket *newso, 470179da74eSRobert Watson struct label *newsopeerlabel); 471179da74eSRobert Watson 472179da74eSRobert Watson typedef void (*mpo_syncache_create_t)(struct label *label, 473179da74eSRobert Watson struct inpcb *inp); 474179da74eSRobert Watson typedef void (*mpo_syncache_create_mbuf_t)(struct label *sc_label, 475179da74eSRobert Watson struct mbuf *m, struct label *mlabel); 476179da74eSRobert Watson typedef void (*mpo_syncache_destroy_label_t)(struct label *label); 477179da74eSRobert Watson typedef int (*mpo_syncache_init_label_t)(struct label *label, int flag); 478179da74eSRobert Watson 47930d239bcSRobert Watson typedef int (*mpo_system_check_acct_t)(struct ucred *cred, 48026ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 48130d239bcSRobert Watson typedef int (*mpo_system_check_audit_t)(struct ucred *cred, void *record, 48218717f69SRobert Watson int length); 48330d239bcSRobert Watson typedef int (*mpo_system_check_auditctl_t)(struct ucred *cred, 48418717f69SRobert Watson struct vnode *vp, struct label *vplabel); 48530d239bcSRobert Watson typedef int (*mpo_system_check_auditon_t)(struct ucred *cred, int cmd); 48630d239bcSRobert Watson typedef int (*mpo_system_check_reboot_t)(struct ucred *cred, int howto); 48730d239bcSRobert Watson typedef int (*mpo_system_check_swapon_t)(struct ucred *cred, 48826ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 48930d239bcSRobert Watson typedef int (*mpo_system_check_swapoff_t)(struct ucred *cred, 49026ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 49130d239bcSRobert Watson typedef int (*mpo_system_check_sysctl_t)(struct ucred *cred, 49263dba32bSPawel Jakub Dawidek struct sysctl_oid *oidp, void *arg1, int arg2, 49363dba32bSPawel Jakub Dawidek struct sysctl_req *req); 494179da74eSRobert Watson 495179da74eSRobert Watson typedef void (*mpo_sysvmsg_cleanup_t)(struct label *msglabel); 496179da74eSRobert Watson typedef void (*mpo_sysvmsg_create_t)(struct ucred *cred, 497179da74eSRobert Watson struct msqid_kernel *msqkptr, struct label *msqlabel, 498179da74eSRobert Watson struct msg *msgptr, struct label *msglabel); 499179da74eSRobert Watson typedef void (*mpo_sysvmsg_destroy_label_t)(struct label *label); 500179da74eSRobert Watson typedef void (*mpo_sysvmsg_init_label_t)(struct label *label); 501179da74eSRobert Watson 502179da74eSRobert Watson typedef int (*mpo_sysvmsq_check_msgmsq_t)(struct ucred *cred, 503179da74eSRobert Watson struct msg *msgptr, struct label *msglabel, 504179da74eSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel); 505179da74eSRobert Watson typedef int (*mpo_sysvmsq_check_msgrcv_t)(struct ucred *cred, 506179da74eSRobert Watson struct msg *msgptr, struct label *msglabel); 507179da74eSRobert Watson typedef int (*mpo_sysvmsq_check_msgrmid_t)(struct ucred *cred, 508179da74eSRobert Watson struct msg *msgptr, struct label *msglabel); 509179da74eSRobert Watson typedef int (*mpo_sysvmsq_check_msqget_t)(struct ucred *cred, 510179da74eSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel); 511179da74eSRobert Watson typedef int (*mpo_sysvmsq_check_msqctl_t)(struct ucred *cred, 512179da74eSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel, 513179da74eSRobert Watson int cmd); 514179da74eSRobert Watson typedef int (*mpo_sysvmsq_check_msqrcv_t)(struct ucred *cred, 515179da74eSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel); 516179da74eSRobert Watson typedef int (*mpo_sysvmsq_check_msqsnd_t)(struct ucred *cred, 517179da74eSRobert Watson struct msqid_kernel *msqkptr, struct label *msqklabel); 518179da74eSRobert Watson typedef void (*mpo_sysvmsq_cleanup_t)(struct label *msqlabel); 519179da74eSRobert Watson typedef void (*mpo_sysvmsq_create_t)(struct ucred *cred, 520179da74eSRobert Watson struct msqid_kernel *msqkptr, struct label *msqlabel); 521179da74eSRobert Watson typedef void (*mpo_sysvmsq_destroy_label_t)(struct label *label); 522179da74eSRobert Watson typedef void (*mpo_sysvmsq_init_label_t)(struct label *label); 523179da74eSRobert Watson 524179da74eSRobert Watson typedef int (*mpo_sysvsem_check_semctl_t)(struct ucred *cred, 525179da74eSRobert Watson struct semid_kernel *semakptr, struct label *semaklabel, 526179da74eSRobert Watson int cmd); 527179da74eSRobert Watson typedef int (*mpo_sysvsem_check_semget_t)(struct ucred *cred, 528179da74eSRobert Watson struct semid_kernel *semakptr, struct label *semaklabel); 529179da74eSRobert Watson typedef int (*mpo_sysvsem_check_semop_t)(struct ucred *cred, 530179da74eSRobert Watson struct semid_kernel *semakptr, struct label *semaklabel, 531179da74eSRobert Watson size_t accesstype); 532179da74eSRobert Watson typedef void (*mpo_sysvsem_cleanup_t)(struct label *semalabel); 533179da74eSRobert Watson typedef void (*mpo_sysvsem_create_t)(struct ucred *cred, 534179da74eSRobert Watson struct semid_kernel *semakptr, struct label *semalabel); 535179da74eSRobert Watson typedef void (*mpo_sysvsem_destroy_label_t)(struct label *label); 536179da74eSRobert Watson typedef void (*mpo_sysvsem_init_label_t)(struct label *label); 537179da74eSRobert Watson 538179da74eSRobert Watson typedef int (*mpo_sysvshm_check_shmat_t)(struct ucred *cred, 539179da74eSRobert Watson struct shmid_kernel *shmsegptr, 540179da74eSRobert Watson struct label *shmseglabel, int shmflg); 541179da74eSRobert Watson typedef int (*mpo_sysvshm_check_shmctl_t)(struct ucred *cred, 542179da74eSRobert Watson struct shmid_kernel *shmsegptr, 543179da74eSRobert Watson struct label *shmseglabel, int cmd); 544179da74eSRobert Watson typedef int (*mpo_sysvshm_check_shmdt_t)(struct ucred *cred, 545179da74eSRobert Watson struct shmid_kernel *shmsegptr, 546179da74eSRobert Watson struct label *shmseglabel); 547179da74eSRobert Watson typedef int (*mpo_sysvshm_check_shmget_t)(struct ucred *cred, 548179da74eSRobert Watson struct shmid_kernel *shmsegptr, 549179da74eSRobert Watson struct label *shmseglabel, int shmflg); 550179da74eSRobert Watson typedef void (*mpo_sysvshm_cleanup_t)(struct label *shmlabel); 551179da74eSRobert Watson typedef void (*mpo_sysvshm_create_t)(struct ucred *cred, 552179da74eSRobert Watson struct shmid_kernel *shmsegptr, struct label *shmlabel); 553179da74eSRobert Watson typedef void (*mpo_sysvshm_destroy_label_t)(struct label *label); 554179da74eSRobert Watson typedef void (*mpo_sysvshm_init_label_t)(struct label *label); 555179da74eSRobert Watson 556179da74eSRobert Watson typedef void (*mpo_thread_userret_t)(struct thread *thread); 557179da74eSRobert Watson 558179da74eSRobert Watson typedef int (*mpo_vnode_associate_extattr_t)(struct mount *mp, 559179da74eSRobert Watson struct label *mplabel, struct vnode *vp, 560179da74eSRobert Watson struct label *vplabel); 561179da74eSRobert Watson typedef void (*mpo_vnode_associate_singlelabel_t)(struct mount *mp, 562179da74eSRobert Watson struct label *mplabel, struct vnode *vp, 563179da74eSRobert Watson struct label *vplabel); 56430d239bcSRobert Watson typedef int (*mpo_vnode_check_access_t)(struct ucred *cred, 56515bc6b2bSEdward Tomasz Napierala struct vnode *vp, struct label *vplabel, 56615bc6b2bSEdward Tomasz Napierala accmode_t accmode); 56730d239bcSRobert Watson typedef int (*mpo_vnode_check_chdir_t)(struct ucred *cred, 56826ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel); 56930d239bcSRobert Watson typedef int (*mpo_vnode_check_chroot_t)(struct ucred *cred, 57026ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel); 57130d239bcSRobert Watson typedef int (*mpo_vnode_check_create_t)(struct ucred *cred, 57226ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 573ddcdf265SRobert Watson struct componentname *cnp, struct vattr *vap); 57430d239bcSRobert Watson typedef int (*mpo_vnode_check_deleteacl_t)(struct ucred *cred, 57526ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 57626ae2b86SRobert Watson acl_type_t type); 57730d239bcSRobert Watson typedef int (*mpo_vnode_check_deleteextattr_t)(struct ucred *cred, 57826ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 57926ae2b86SRobert Watson int attrnamespace, const char *name); 58030d239bcSRobert Watson typedef int (*mpo_vnode_check_exec_t)(struct ucred *cred, 58126ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 5821d82b391SRobert Watson struct image_params *imgp, struct label *execlabel); 58330d239bcSRobert Watson typedef int (*mpo_vnode_check_getacl_t)(struct ucred *cred, 58426ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 58526ae2b86SRobert Watson acl_type_t type); 58630d239bcSRobert Watson typedef int (*mpo_vnode_check_getextattr_t)(struct ucred *cred, 58726ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 588fefd0ac8SRobert Watson int attrnamespace, const char *name); 58930d239bcSRobert Watson typedef int (*mpo_vnode_check_link_t)(struct ucred *cred, 59026ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 59126ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 59226ae2b86SRobert Watson struct componentname *cnp); 59330d239bcSRobert Watson typedef int (*mpo_vnode_check_listextattr_t)(struct ucred *cred, 59426ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 5951d82b391SRobert Watson int attrnamespace); 59630d239bcSRobert Watson typedef int (*mpo_vnode_check_lookup_t)(struct ucred *cred, 59726ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 598ddcdf265SRobert Watson struct componentname *cnp); 59930d239bcSRobert Watson typedef int (*mpo_vnode_check_mmap_t)(struct ucred *cred, 6001d82b391SRobert Watson struct vnode *vp, struct label *label, int prot, 6011d82b391SRobert Watson int flags); 60230d239bcSRobert Watson typedef void (*mpo_vnode_check_mmap_downgrade_t)(struct ucred *cred, 60326ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, int *prot); 60430d239bcSRobert Watson typedef int (*mpo_vnode_check_mprotect_t)(struct ucred *cred, 60526ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, int prot); 60630d239bcSRobert Watson typedef int (*mpo_vnode_check_open_t)(struct ucred *cred, 60715bc6b2bSEdward Tomasz Napierala struct vnode *vp, struct label *vplabel, 60815bc6b2bSEdward Tomasz Napierala accmode_t accmode); 60930d239bcSRobert Watson typedef int (*mpo_vnode_check_poll_t)(struct ucred *active_cred, 610177142e4SRobert Watson struct ucred *file_cred, struct vnode *vp, 61126ae2b86SRobert Watson struct label *vplabel); 61230d239bcSRobert Watson typedef int (*mpo_vnode_check_read_t)(struct ucred *active_cred, 613177142e4SRobert Watson struct ucred *file_cred, struct vnode *vp, 61426ae2b86SRobert Watson struct label *vplabel); 61530d239bcSRobert Watson typedef int (*mpo_vnode_check_readdir_t)(struct ucred *cred, 61626ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel); 61730d239bcSRobert Watson typedef int (*mpo_vnode_check_readlink_t)(struct ucred *cred, 61826ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 61930d239bcSRobert Watson typedef int (*mpo_vnode_check_relabel_t)(struct ucred *cred, 62026ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 621ddcdf265SRobert Watson struct label *newlabel); 62230d239bcSRobert Watson typedef int (*mpo_vnode_check_rename_from_t)(struct ucred *cred, 62326ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 62426ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 625ddcdf265SRobert Watson struct componentname *cnp); 62630d239bcSRobert Watson typedef int (*mpo_vnode_check_rename_to_t)(struct ucred *cred, 62726ae2b86SRobert Watson struct vnode *dvp, struct label *dvplabel, 62826ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, int samedir, 6291d82b391SRobert Watson struct componentname *cnp); 63030d239bcSRobert Watson typedef int (*mpo_vnode_check_revoke_t)(struct ucred *cred, 63126ae2b86SRobert Watson struct vnode *vp, struct label *vplabel); 63230d239bcSRobert Watson typedef int (*mpo_vnode_check_setacl_t)(struct ucred *cred, 63326ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, acl_type_t type, 634ddcdf265SRobert Watson struct acl *acl); 63530d239bcSRobert Watson typedef int (*mpo_vnode_check_setextattr_t)(struct ucred *cred, 63626ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 637fefd0ac8SRobert Watson int attrnamespace, const char *name); 63830d239bcSRobert Watson typedef int (*mpo_vnode_check_setflags_t)(struct ucred *cred, 63926ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, u_long flags); 64030d239bcSRobert Watson typedef int (*mpo_vnode_check_setmode_t)(struct ucred *cred, 64126ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, mode_t mode); 64230d239bcSRobert Watson typedef int (*mpo_vnode_check_setowner_t)(struct ucred *cred, 64326ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, uid_t uid, 644ddcdf265SRobert Watson gid_t gid); 64530d239bcSRobert Watson typedef int (*mpo_vnode_check_setutimes_t)(struct ucred *cred, 64626ae2b86SRobert Watson struct vnode *vp, struct label *vplabel, 647ddcdf265SRobert Watson struct timespec atime, struct timespec mtime); 64830d239bcSRobert Watson typedef int (*mpo_vnode_check_stat_t)(struct ucred *active_cred, 649177142e4SRobert Watson struct ucred *file_cred, struct vnode *vp, 65026ae2b86SRobert Watson struct label *vplabel); 65130d239bcSRobert Watson typedef int (*mpo_vnode_check_unlink_t)(struct ucred *cred, 65245e0f3d6SRobert Watson struct vnode *dvp, struct label *dvplabel, 65345e0f3d6SRobert Watson struct vnode *vp, struct label *vplabel, 65445e0f3d6SRobert Watson struct componentname *cnp); 65530d239bcSRobert Watson typedef int (*mpo_vnode_check_write_t)(struct ucred *active_cred, 656177142e4SRobert Watson struct ucred *file_cred, struct vnode *vp, 65726ae2b86SRobert Watson struct label *vplabel); 658179da74eSRobert Watson typedef void (*mpo_vnode_copy_label_t)(struct label *src, 659179da74eSRobert Watson struct label *dest); 660179da74eSRobert Watson typedef int (*mpo_vnode_create_extattr_t)(struct ucred *cred, 661179da74eSRobert Watson struct mount *mp, struct label *mplabel, 662179da74eSRobert Watson struct vnode *dvp, struct label *dvplabel, 663179da74eSRobert Watson struct vnode *vp, struct label *vplabel, 664179da74eSRobert Watson struct componentname *cnp); 665179da74eSRobert Watson typedef void (*mpo_vnode_destroy_label_t)(struct label *label); 666179da74eSRobert Watson typedef void (*mpo_vnode_execve_transition_t)(struct ucred *old, 667179da74eSRobert Watson struct ucred *new, struct vnode *vp, 668179da74eSRobert Watson struct label *vplabel, struct label *interpvplabel, 669179da74eSRobert Watson struct image_params *imgp, struct label *execlabel); 670179da74eSRobert Watson typedef int (*mpo_vnode_execve_will_transition_t)(struct ucred *old, 671179da74eSRobert Watson struct vnode *vp, struct label *vplabel, 672179da74eSRobert Watson struct label *interpvplabel, struct image_params *imgp, 673179da74eSRobert Watson struct label *execlabel); 674179da74eSRobert Watson typedef int (*mpo_vnode_externalize_label_t)(struct label *label, 675179da74eSRobert Watson char *element_name, struct sbuf *sb, int *claimed); 676179da74eSRobert Watson typedef void (*mpo_vnode_init_label_t)(struct label *label); 677179da74eSRobert Watson typedef int (*mpo_vnode_internalize_label_t)(struct label *label, 678179da74eSRobert Watson char *element_name, char *element_data, int *claimed); 679179da74eSRobert Watson typedef void (*mpo_vnode_relabel_t)(struct ucred *cred, struct vnode *vp, 680179da74eSRobert Watson struct label *vplabel, struct label *label); 681179da74eSRobert Watson typedef int (*mpo_vnode_setlabel_extattr_t)(struct ucred *cred, 682179da74eSRobert Watson struct vnode *vp, struct label *vplabel, 683179da74eSRobert Watson struct label *intlabel); 6841d82b391SRobert Watson 6851d82b391SRobert Watson struct mac_policy_ops { 6861d82b391SRobert Watson /* 6871d82b391SRobert Watson * Policy module operations. 6881d82b391SRobert Watson */ 6891d82b391SRobert Watson mpo_destroy_t mpo_destroy; 6901d82b391SRobert Watson mpo_init_t mpo_init; 6911d82b391SRobert Watson 6921d82b391SRobert Watson /* 6931d82b391SRobert Watson * General policy-directed security system call so that policies may 6941d82b391SRobert Watson * implement new services without reserving explicit system call 6951d82b391SRobert Watson * numbers. 6961d82b391SRobert Watson */ 6971d82b391SRobert Watson mpo_syscall_t mpo_syscall; 6981d82b391SRobert Watson 6991d82b391SRobert Watson /* 7001d82b391SRobert Watson * Label operations. Initialize label storage, destroy label 7011d82b391SRobert Watson * storage, recycle for re-use without init/destroy, copy a label to 7021d82b391SRobert Watson * initialized storage, and externalize/internalize from/to 7031d82b391SRobert Watson * initialized storage. 7041d82b391SRobert Watson */ 705179da74eSRobert Watson mpo_bpfdesc_check_receive_t mpo_bpfdesc_check_receive; 706179da74eSRobert Watson mpo_bpfdesc_create_t mpo_bpfdesc_create; 707179da74eSRobert Watson mpo_bpfdesc_create_mbuf_t mpo_bpfdesc_create_mbuf; 70830d239bcSRobert Watson mpo_bpfdesc_destroy_label_t mpo_bpfdesc_destroy_label; 709179da74eSRobert Watson mpo_bpfdesc_init_label_t mpo_bpfdesc_init_label; 7101d82b391SRobert Watson 711212ab0cfSRobert Watson mpo_cred_associate_nfsd_t mpo_cred_associate_nfsd; 712179da74eSRobert Watson mpo_cred_check_relabel_t mpo_cred_check_relabel; 7136f6174a7SRobert Watson mpo_cred_check_setaudit_t mpo_cred_check_setaudit; 7146f6174a7SRobert Watson mpo_cred_check_setaudit_addr_t mpo_cred_check_setaudit_addr; 7156f6174a7SRobert Watson mpo_cred_check_setauid_t mpo_cred_check_setauid; 7166f6174a7SRobert Watson mpo_cred_check_setuid_t mpo_cred_check_setuid; 7176f6174a7SRobert Watson mpo_cred_check_seteuid_t mpo_cred_check_seteuid; 7186f6174a7SRobert Watson mpo_cred_check_setgid_t mpo_cred_check_setgid; 7196f6174a7SRobert Watson mpo_cred_check_setegid_t mpo_cred_check_setegid; 7206f6174a7SRobert Watson mpo_cred_check_setgroups_t mpo_cred_check_setgroups; 7216f6174a7SRobert Watson mpo_cred_check_setreuid_t mpo_cred_check_setreuid; 7226f6174a7SRobert Watson mpo_cred_check_setregid_t mpo_cred_check_setregid; 7236f6174a7SRobert Watson mpo_cred_check_setresuid_t mpo_cred_check_setresuid; 7246f6174a7SRobert Watson mpo_cred_check_setresgid_t mpo_cred_check_setresgid; 725179da74eSRobert Watson mpo_cred_check_visible_t mpo_cred_check_visible; 726179da74eSRobert Watson mpo_cred_copy_label_t mpo_cred_copy_label; 727212ab0cfSRobert Watson mpo_cred_create_swapper_t mpo_cred_create_swapper; 728212ab0cfSRobert Watson mpo_cred_create_init_t mpo_cred_create_init; 729179da74eSRobert Watson mpo_cred_destroy_label_t mpo_cred_destroy_label; 730179da74eSRobert Watson mpo_cred_externalize_label_t mpo_cred_externalize_label; 731179da74eSRobert Watson mpo_cred_init_label_t mpo_cred_init_label; 732179da74eSRobert Watson mpo_cred_internalize_label_t mpo_cred_internalize_label; 733179da74eSRobert Watson mpo_cred_relabel_t mpo_cred_relabel; 734179da74eSRobert Watson 7352449b9e5SMitchell Horne mpo_ddb_command_register_t mpo_ddb_command_register; 7362449b9e5SMitchell Horne mpo_ddb_command_exec_t mpo_ddb_command_exec; 7372449b9e5SMitchell Horne 73830d239bcSRobert Watson mpo_devfs_create_device_t mpo_devfs_create_device; 73930d239bcSRobert Watson mpo_devfs_create_directory_t mpo_devfs_create_directory; 74030d239bcSRobert Watson mpo_devfs_create_symlink_t mpo_devfs_create_symlink; 741179da74eSRobert Watson mpo_devfs_destroy_label_t mpo_devfs_destroy_label; 742179da74eSRobert Watson mpo_devfs_init_label_t mpo_devfs_init_label; 74330d239bcSRobert Watson mpo_devfs_update_t mpo_devfs_update; 744179da74eSRobert Watson mpo_devfs_vnode_associate_t mpo_devfs_vnode_associate; 7451d82b391SRobert Watson 74630d239bcSRobert Watson mpo_ifnet_check_relabel_t mpo_ifnet_check_relabel; 74730d239bcSRobert Watson mpo_ifnet_check_transmit_t mpo_ifnet_check_transmit; 748179da74eSRobert Watson mpo_ifnet_copy_label_t mpo_ifnet_copy_label; 749179da74eSRobert Watson mpo_ifnet_create_t mpo_ifnet_create; 750179da74eSRobert Watson mpo_ifnet_create_mbuf_t mpo_ifnet_create_mbuf; 751179da74eSRobert Watson mpo_ifnet_destroy_label_t mpo_ifnet_destroy_label; 752179da74eSRobert Watson mpo_ifnet_externalize_label_t mpo_ifnet_externalize_label; 753179da74eSRobert Watson mpo_ifnet_init_label_t mpo_ifnet_init_label; 754179da74eSRobert Watson mpo_ifnet_internalize_label_t mpo_ifnet_internalize_label; 755179da74eSRobert Watson mpo_ifnet_relabel_t mpo_ifnet_relabel; 756179da74eSRobert Watson 75730d239bcSRobert Watson mpo_inpcb_check_deliver_t mpo_inpcb_check_deliver; 75837ee7293SBjoern A. Zeeb mpo_inpcb_check_visible_t mpo_inpcb_check_visible; 759179da74eSRobert Watson mpo_inpcb_create_t mpo_inpcb_create; 760179da74eSRobert Watson mpo_inpcb_create_mbuf_t mpo_inpcb_create_mbuf; 761179da74eSRobert Watson mpo_inpcb_destroy_label_t mpo_inpcb_destroy_label; 762179da74eSRobert Watson mpo_inpcb_init_label_t mpo_inpcb_init_label; 763179da74eSRobert Watson mpo_inpcb_sosetlabel_t mpo_inpcb_sosetlabel; 764179da74eSRobert Watson 7654b908c8bSRobert Watson mpo_ip6q_create_t mpo_ip6q_create; 7664b908c8bSRobert Watson mpo_ip6q_destroy_label_t mpo_ip6q_destroy_label; 7674b908c8bSRobert Watson mpo_ip6q_init_label_t mpo_ip6q_init_label; 7684b908c8bSRobert Watson mpo_ip6q_match_t mpo_ip6q_match; 7694b908c8bSRobert Watson mpo_ip6q_reassemble mpo_ip6q_reassemble; 7704b908c8bSRobert Watson mpo_ip6q_update_t mpo_ip6q_update; 7714b908c8bSRobert Watson 772179da74eSRobert Watson mpo_ipq_create_t mpo_ipq_create; 773179da74eSRobert Watson mpo_ipq_destroy_label_t mpo_ipq_destroy_label; 774179da74eSRobert Watson mpo_ipq_init_label_t mpo_ipq_init_label; 775179da74eSRobert Watson mpo_ipq_match_t mpo_ipq_match; 776179da74eSRobert Watson mpo_ipq_reassemble mpo_ipq_reassemble; 777179da74eSRobert Watson mpo_ipq_update_t mpo_ipq_update; 778179da74eSRobert Watson 7792449b9e5SMitchell Horne mpo_kdb_check_backend_t mpo_kdb_check_backend; 7802449b9e5SMitchell Horne 78130d239bcSRobert Watson mpo_kenv_check_dump_t mpo_kenv_check_dump; 78230d239bcSRobert Watson mpo_kenv_check_get_t mpo_kenv_check_get; 78330d239bcSRobert Watson mpo_kenv_check_set_t mpo_kenv_check_set; 78430d239bcSRobert Watson mpo_kenv_check_unset_t mpo_kenv_check_unset; 785179da74eSRobert Watson 78630d239bcSRobert Watson mpo_kld_check_load_t mpo_kld_check_load; 78730d239bcSRobert Watson mpo_kld_check_stat_t mpo_kld_check_stat; 788179da74eSRobert Watson 789179da74eSRobert Watson mpo_mbuf_copy_label_t mpo_mbuf_copy_label; 790179da74eSRobert Watson mpo_mbuf_destroy_label_t mpo_mbuf_destroy_label; 791179da74eSRobert Watson mpo_mbuf_init_label_t mpo_mbuf_init_label; 792179da74eSRobert Watson 79330d239bcSRobert Watson mpo_mount_check_stat_t mpo_mount_check_stat; 794179da74eSRobert Watson mpo_mount_create_t mpo_mount_create; 795179da74eSRobert Watson mpo_mount_destroy_label_t mpo_mount_destroy_label; 796179da74eSRobert Watson mpo_mount_init_label_t mpo_mount_init_label; 797179da74eSRobert Watson 798b9b0dac3SRobert Watson mpo_netinet_arp_send_t mpo_netinet_arp_send; 799a13e21f7SRobert Watson mpo_netinet_firewall_reply_t mpo_netinet_firewall_reply; 80086407646SRobert Watson mpo_netinet_firewall_send_t mpo_netinet_firewall_send; 801179da74eSRobert Watson mpo_netinet_fragment_t mpo_netinet_fragment; 802179da74eSRobert Watson mpo_netinet_icmp_reply_t mpo_netinet_icmp_reply; 803a13e21f7SRobert Watson mpo_netinet_icmp_replyinplace_t mpo_netinet_icmp_replyinplace; 804b9b0dac3SRobert Watson mpo_netinet_igmp_send_t mpo_netinet_igmp_send; 805179da74eSRobert Watson mpo_netinet_tcp_reply_t mpo_netinet_tcp_reply; 806179da74eSRobert Watson 807b9b0dac3SRobert Watson mpo_netinet6_nd6_send_t mpo_netinet6_nd6_send; 808b9b0dac3SRobert Watson 80930d239bcSRobert Watson mpo_pipe_check_ioctl_t mpo_pipe_check_ioctl; 81030d239bcSRobert Watson mpo_pipe_check_poll_t mpo_pipe_check_poll; 81130d239bcSRobert Watson mpo_pipe_check_read_t mpo_pipe_check_read; 81230d239bcSRobert Watson mpo_pipe_check_relabel_t mpo_pipe_check_relabel; 81330d239bcSRobert Watson mpo_pipe_check_stat_t mpo_pipe_check_stat; 81430d239bcSRobert Watson mpo_pipe_check_write_t mpo_pipe_check_write; 815179da74eSRobert Watson mpo_pipe_copy_label_t mpo_pipe_copy_label; 816179da74eSRobert Watson mpo_pipe_create_t mpo_pipe_create; 817179da74eSRobert Watson mpo_pipe_destroy_label_t mpo_pipe_destroy_label; 818179da74eSRobert Watson mpo_pipe_externalize_label_t mpo_pipe_externalize_label; 819179da74eSRobert Watson mpo_pipe_init_label_t mpo_pipe_init_label; 820179da74eSRobert Watson mpo_pipe_internalize_label_t mpo_pipe_internalize_label; 821179da74eSRobert Watson mpo_pipe_relabel_t mpo_pipe_relabel; 822179da74eSRobert Watson 82330d239bcSRobert Watson mpo_posixsem_check_getvalue_t mpo_posixsem_check_getvalue; 82430d239bcSRobert Watson mpo_posixsem_check_open_t mpo_posixsem_check_open; 82530d239bcSRobert Watson mpo_posixsem_check_post_t mpo_posixsem_check_post; 8269c00bb91SKonstantin Belousov mpo_posixsem_check_setmode_t mpo_posixsem_check_setmode; 8279c00bb91SKonstantin Belousov mpo_posixsem_check_setowner_t mpo_posixsem_check_setowner; 8286bc1e9cdSJohn Baldwin mpo_posixsem_check_stat_t mpo_posixsem_check_stat; 82930d239bcSRobert Watson mpo_posixsem_check_unlink_t mpo_posixsem_check_unlink; 83030d239bcSRobert Watson mpo_posixsem_check_wait_t mpo_posixsem_check_wait; 831179da74eSRobert Watson mpo_posixsem_create_t mpo_posixsem_create; 832179da74eSRobert Watson mpo_posixsem_destroy_label_t mpo_posixsem_destroy_label; 833179da74eSRobert Watson mpo_posixsem_init_label_t mpo_posixsem_init_label; 834179da74eSRobert Watson 8359b6dd12eSRobert Watson mpo_posixshm_check_create_t mpo_posixshm_check_create; 8368e38aeffSJohn Baldwin mpo_posixshm_check_mmap_t mpo_posixshm_check_mmap; 8378e38aeffSJohn Baldwin mpo_posixshm_check_open_t mpo_posixshm_check_open; 838940cb0e2SKonstantin Belousov mpo_posixshm_check_read_t mpo_posixshm_check_read; 8399c00bb91SKonstantin Belousov mpo_posixshm_check_setmode_t mpo_posixshm_check_setmode; 8409c00bb91SKonstantin Belousov mpo_posixshm_check_setowner_t mpo_posixshm_check_setowner; 8418e38aeffSJohn Baldwin mpo_posixshm_check_stat_t mpo_posixshm_check_stat; 8428e38aeffSJohn Baldwin mpo_posixshm_check_truncate_t mpo_posixshm_check_truncate; 8438e38aeffSJohn Baldwin mpo_posixshm_check_unlink_t mpo_posixshm_check_unlink; 844940cb0e2SKonstantin Belousov mpo_posixshm_check_write_t mpo_posixshm_check_write; 8458e38aeffSJohn Baldwin mpo_posixshm_create_t mpo_posixshm_create; 8468e38aeffSJohn Baldwin mpo_posixshm_destroy_label_t mpo_posixshm_destroy_label; 8478e38aeffSJohn Baldwin mpo_posixshm_init_label_t mpo_posixshm_init_label; 8488e38aeffSJohn Baldwin 849179da74eSRobert Watson mpo_priv_check_t mpo_priv_check; 850179da74eSRobert Watson mpo_priv_grant_t mpo_priv_grant; 851179da74eSRobert Watson 85230d239bcSRobert Watson mpo_proc_check_debug_t mpo_proc_check_debug; 85330d239bcSRobert Watson mpo_proc_check_sched_t mpo_proc_check_sched; 85430d239bcSRobert Watson mpo_proc_check_signal_t mpo_proc_check_signal; 85530d239bcSRobert Watson mpo_proc_check_wait_t mpo_proc_check_wait; 856179da74eSRobert Watson mpo_proc_destroy_label_t mpo_proc_destroy_label; 857179da74eSRobert Watson mpo_proc_init_label_t mpo_proc_init_label; 858179da74eSRobert Watson 85930d239bcSRobert Watson mpo_socket_check_accept_t mpo_socket_check_accept; 86030d239bcSRobert Watson mpo_socket_check_bind_t mpo_socket_check_bind; 86130d239bcSRobert Watson mpo_socket_check_connect_t mpo_socket_check_connect; 86230d239bcSRobert Watson mpo_socket_check_create_t mpo_socket_check_create; 86330d239bcSRobert Watson mpo_socket_check_deliver_t mpo_socket_check_deliver; 86430d239bcSRobert Watson mpo_socket_check_listen_t mpo_socket_check_listen; 86530d239bcSRobert Watson mpo_socket_check_poll_t mpo_socket_check_poll; 86630d239bcSRobert Watson mpo_socket_check_receive_t mpo_socket_check_receive; 86730d239bcSRobert Watson mpo_socket_check_relabel_t mpo_socket_check_relabel; 86830d239bcSRobert Watson mpo_socket_check_send_t mpo_socket_check_send; 86930d239bcSRobert Watson mpo_socket_check_stat_t mpo_socket_check_stat; 87030d239bcSRobert Watson mpo_socket_check_visible_t mpo_socket_check_visible; 871179da74eSRobert Watson mpo_socket_copy_label_t mpo_socket_copy_label; 872179da74eSRobert Watson mpo_socket_create_t mpo_socket_create; 873179da74eSRobert Watson mpo_socket_create_mbuf_t mpo_socket_create_mbuf; 874179da74eSRobert Watson mpo_socket_destroy_label_t mpo_socket_destroy_label; 875179da74eSRobert Watson mpo_socket_externalize_label_t mpo_socket_externalize_label; 876179da74eSRobert Watson mpo_socket_init_label_t mpo_socket_init_label; 877179da74eSRobert Watson mpo_socket_internalize_label_t mpo_socket_internalize_label; 878179da74eSRobert Watson mpo_socket_newconn_t mpo_socket_newconn; 879179da74eSRobert Watson mpo_socket_relabel_t mpo_socket_relabel; 880179da74eSRobert Watson 881179da74eSRobert Watson mpo_socketpeer_destroy_label_t mpo_socketpeer_destroy_label; 882179da74eSRobert Watson mpo_socketpeer_externalize_label_t mpo_socketpeer_externalize_label; 883179da74eSRobert Watson mpo_socketpeer_init_label_t mpo_socketpeer_init_label; 884179da74eSRobert Watson mpo_socketpeer_set_from_mbuf_t mpo_socketpeer_set_from_mbuf; 885179da74eSRobert Watson mpo_socketpeer_set_from_socket_t mpo_socketpeer_set_from_socket; 886179da74eSRobert Watson 887179da74eSRobert Watson mpo_syncache_init_label_t mpo_syncache_init_label; 888179da74eSRobert Watson mpo_syncache_destroy_label_t mpo_syncache_destroy_label; 889179da74eSRobert Watson mpo_syncache_create_t mpo_syncache_create; 890179da74eSRobert Watson mpo_syncache_create_mbuf_t mpo_syncache_create_mbuf; 891179da74eSRobert Watson 89230d239bcSRobert Watson mpo_system_check_acct_t mpo_system_check_acct; 89330d239bcSRobert Watson mpo_system_check_audit_t mpo_system_check_audit; 89430d239bcSRobert Watson mpo_system_check_auditctl_t mpo_system_check_auditctl; 89530d239bcSRobert Watson mpo_system_check_auditon_t mpo_system_check_auditon; 89630d239bcSRobert Watson mpo_system_check_reboot_t mpo_system_check_reboot; 89730d239bcSRobert Watson mpo_system_check_swapon_t mpo_system_check_swapon; 89830d239bcSRobert Watson mpo_system_check_swapoff_t mpo_system_check_swapoff; 89930d239bcSRobert Watson mpo_system_check_sysctl_t mpo_system_check_sysctl; 900179da74eSRobert Watson 901179da74eSRobert Watson mpo_sysvmsg_cleanup_t mpo_sysvmsg_cleanup; 902179da74eSRobert Watson mpo_sysvmsg_create_t mpo_sysvmsg_create; 903179da74eSRobert Watson mpo_sysvmsg_destroy_label_t mpo_sysvmsg_destroy_label; 904179da74eSRobert Watson mpo_sysvmsg_init_label_t mpo_sysvmsg_init_label; 905179da74eSRobert Watson 906179da74eSRobert Watson mpo_sysvmsq_check_msgmsq_t mpo_sysvmsq_check_msgmsq; 907179da74eSRobert Watson mpo_sysvmsq_check_msgrcv_t mpo_sysvmsq_check_msgrcv; 908179da74eSRobert Watson mpo_sysvmsq_check_msgrmid_t mpo_sysvmsq_check_msgrmid; 909179da74eSRobert Watson mpo_sysvmsq_check_msqctl_t mpo_sysvmsq_check_msqctl; 910179da74eSRobert Watson mpo_sysvmsq_check_msqget_t mpo_sysvmsq_check_msqget; 911179da74eSRobert Watson mpo_sysvmsq_check_msqrcv_t mpo_sysvmsq_check_msqrcv; 912179da74eSRobert Watson mpo_sysvmsq_check_msqsnd_t mpo_sysvmsq_check_msqsnd; 913179da74eSRobert Watson mpo_sysvmsq_cleanup_t mpo_sysvmsq_cleanup; 914179da74eSRobert Watson mpo_sysvmsq_create_t mpo_sysvmsq_create; 915179da74eSRobert Watson mpo_sysvmsq_destroy_label_t mpo_sysvmsq_destroy_label; 916179da74eSRobert Watson mpo_sysvmsq_init_label_t mpo_sysvmsq_init_label; 917179da74eSRobert Watson 918179da74eSRobert Watson mpo_sysvsem_check_semctl_t mpo_sysvsem_check_semctl; 919179da74eSRobert Watson mpo_sysvsem_check_semget_t mpo_sysvsem_check_semget; 920179da74eSRobert Watson mpo_sysvsem_check_semop_t mpo_sysvsem_check_semop; 921179da74eSRobert Watson mpo_sysvsem_cleanup_t mpo_sysvsem_cleanup; 922179da74eSRobert Watson mpo_sysvsem_create_t mpo_sysvsem_create; 923179da74eSRobert Watson mpo_sysvsem_destroy_label_t mpo_sysvsem_destroy_label; 924179da74eSRobert Watson mpo_sysvsem_init_label_t mpo_sysvsem_init_label; 925179da74eSRobert Watson 926179da74eSRobert Watson mpo_sysvshm_check_shmat_t mpo_sysvshm_check_shmat; 927179da74eSRobert Watson mpo_sysvshm_check_shmctl_t mpo_sysvshm_check_shmctl; 928179da74eSRobert Watson mpo_sysvshm_check_shmdt_t mpo_sysvshm_check_shmdt; 929179da74eSRobert Watson mpo_sysvshm_check_shmget_t mpo_sysvshm_check_shmget; 930179da74eSRobert Watson mpo_sysvshm_cleanup_t mpo_sysvshm_cleanup; 931179da74eSRobert Watson mpo_sysvshm_create_t mpo_sysvshm_create; 932179da74eSRobert Watson mpo_sysvshm_destroy_label_t mpo_sysvshm_destroy_label; 933179da74eSRobert Watson mpo_sysvshm_init_label_t mpo_sysvshm_init_label; 934179da74eSRobert Watson 935179da74eSRobert Watson mpo_thread_userret_t mpo_thread_userret; 936179da74eSRobert Watson 93730d239bcSRobert Watson mpo_vnode_check_access_t mpo_vnode_check_access; 93830d239bcSRobert Watson mpo_vnode_check_chdir_t mpo_vnode_check_chdir; 93930d239bcSRobert Watson mpo_vnode_check_chroot_t mpo_vnode_check_chroot; 94030d239bcSRobert Watson mpo_vnode_check_create_t mpo_vnode_check_create; 94130d239bcSRobert Watson mpo_vnode_check_deleteacl_t mpo_vnode_check_deleteacl; 94230d239bcSRobert Watson mpo_vnode_check_deleteextattr_t mpo_vnode_check_deleteextattr; 94330d239bcSRobert Watson mpo_vnode_check_exec_t mpo_vnode_check_exec; 94430d239bcSRobert Watson mpo_vnode_check_getacl_t mpo_vnode_check_getacl; 94530d239bcSRobert Watson mpo_vnode_check_getextattr_t mpo_vnode_check_getextattr; 94630d239bcSRobert Watson mpo_vnode_check_link_t mpo_vnode_check_link; 94730d239bcSRobert Watson mpo_vnode_check_listextattr_t mpo_vnode_check_listextattr; 94830d239bcSRobert Watson mpo_vnode_check_lookup_t mpo_vnode_check_lookup; 94930d239bcSRobert Watson mpo_vnode_check_mmap_t mpo_vnode_check_mmap; 95030d239bcSRobert Watson mpo_vnode_check_mmap_downgrade_t mpo_vnode_check_mmap_downgrade; 95130d239bcSRobert Watson mpo_vnode_check_mprotect_t mpo_vnode_check_mprotect; 95230d239bcSRobert Watson mpo_vnode_check_open_t mpo_vnode_check_open; 95330d239bcSRobert Watson mpo_vnode_check_poll_t mpo_vnode_check_poll; 95430d239bcSRobert Watson mpo_vnode_check_read_t mpo_vnode_check_read; 95530d239bcSRobert Watson mpo_vnode_check_readdir_t mpo_vnode_check_readdir; 95630d239bcSRobert Watson mpo_vnode_check_readlink_t mpo_vnode_check_readlink; 95730d239bcSRobert Watson mpo_vnode_check_relabel_t mpo_vnode_check_relabel; 95830d239bcSRobert Watson mpo_vnode_check_rename_from_t mpo_vnode_check_rename_from; 95930d239bcSRobert Watson mpo_vnode_check_rename_to_t mpo_vnode_check_rename_to; 96030d239bcSRobert Watson mpo_vnode_check_revoke_t mpo_vnode_check_revoke; 96130d239bcSRobert Watson mpo_vnode_check_setacl_t mpo_vnode_check_setacl; 96230d239bcSRobert Watson mpo_vnode_check_setextattr_t mpo_vnode_check_setextattr; 96330d239bcSRobert Watson mpo_vnode_check_setflags_t mpo_vnode_check_setflags; 96430d239bcSRobert Watson mpo_vnode_check_setmode_t mpo_vnode_check_setmode; 96530d239bcSRobert Watson mpo_vnode_check_setowner_t mpo_vnode_check_setowner; 96630d239bcSRobert Watson mpo_vnode_check_setutimes_t mpo_vnode_check_setutimes; 96730d239bcSRobert Watson mpo_vnode_check_stat_t mpo_vnode_check_stat; 96830d239bcSRobert Watson mpo_vnode_check_unlink_t mpo_vnode_check_unlink; 96930d239bcSRobert Watson mpo_vnode_check_write_t mpo_vnode_check_write; 970179da74eSRobert Watson mpo_vnode_associate_extattr_t mpo_vnode_associate_extattr; 971179da74eSRobert Watson mpo_vnode_associate_singlelabel_t mpo_vnode_associate_singlelabel; 972179da74eSRobert Watson mpo_vnode_destroy_label_t mpo_vnode_destroy_label; 973179da74eSRobert Watson mpo_vnode_copy_label_t mpo_vnode_copy_label; 974179da74eSRobert Watson mpo_vnode_create_extattr_t mpo_vnode_create_extattr; 975179da74eSRobert Watson mpo_vnode_execve_transition_t mpo_vnode_execve_transition; 976179da74eSRobert Watson mpo_vnode_execve_will_transition_t mpo_vnode_execve_will_transition; 977179da74eSRobert Watson mpo_vnode_externalize_label_t mpo_vnode_externalize_label; 978179da74eSRobert Watson mpo_vnode_init_label_t mpo_vnode_init_label; 979179da74eSRobert Watson mpo_vnode_internalize_label_t mpo_vnode_internalize_label; 980179da74eSRobert Watson mpo_vnode_relabel_t mpo_vnode_relabel; 981179da74eSRobert Watson mpo_vnode_setlabel_extattr_t mpo_vnode_setlabel_extattr; 982ddcdf265SRobert Watson }; 983ddcdf265SRobert Watson 9843459e1d2SRobert Watson /* 9853459e1d2SRobert Watson * struct mac_policy_conf is the registration structure for policies, and is 9863459e1d2SRobert Watson * provided to the MAC Framework using MAC_POLICY_SET() to invoke a SYSINIT 9873459e1d2SRobert Watson * to register the policy. In general, the fields are immutable, with the 9883459e1d2SRobert Watson * exception of the "security field", run-time flags, and policy list entry, 9893459e1d2SRobert Watson * which are managed by the MAC Framework. Be careful when modifying this 9903459e1d2SRobert Watson * structure, as its layout is statically compiled into all policies. 9913459e1d2SRobert Watson */ 992ddcdf265SRobert Watson struct mac_policy_conf { 993ddcdf265SRobert Watson char *mpc_name; /* policy name */ 994ddcdf265SRobert Watson char *mpc_fullname; /* policy full name */ 995ddcdf265SRobert Watson struct mac_policy_ops *mpc_ops; /* policy operations */ 996ddcdf265SRobert Watson int mpc_loadtime_flags; /* flags */ 997ddcdf265SRobert Watson int *mpc_field_off; /* security field */ 998ddcdf265SRobert Watson int mpc_runtime_flags; /* flags */ 9996356dba0SRobert Watson int _mpc_spare1; /* Spare. */ 10006356dba0SRobert Watson uint64_t _mpc_spare2; /* Spare. */ 10019162f64bSRobert Watson uint64_t _mpc_spare3; /* Spare. */ 10029162f64bSRobert Watson void *_mpc_spare4; /* Spare. */ 1003ddcdf265SRobert Watson LIST_ENTRY(mac_policy_conf) mpc_list; /* global list */ 1004ddcdf265SRobert Watson }; 1005ddcdf265SRobert Watson 1006ddcdf265SRobert Watson /* Flags for the mpc_loadtime_flags field. */ 1007ddcdf265SRobert Watson #define MPC_LOADTIME_FLAG_NOTLATE 0x00000001 1008ddcdf265SRobert Watson #define MPC_LOADTIME_FLAG_UNLOADOK 0x00000002 1009ddcdf265SRobert Watson 1010ddcdf265SRobert Watson /* Flags for the mpc_runtime_flags field. */ 1011ddcdf265SRobert Watson #define MPC_RUNTIME_FLAG_REGISTERED 0x00000001 1012ddcdf265SRobert Watson 1013be23ba9aSRobert Watson /*- 1014be23ba9aSRobert Watson * The TrustedBSD MAC Framework has a major version number, MAC_VERSION, 1015be23ba9aSRobert Watson * which defines the ABI of the Framework present in the kernel (and depended 1016be23ba9aSRobert Watson * on by policy modules compiled against that kernel). Currently, 1017be23ba9aSRobert Watson * MAC_POLICY_SET() requires that the kernel and module ABI version numbers 1018be23ba9aSRobert Watson * exactly match. The following major versions have been defined to date: 1019be23ba9aSRobert Watson * 1020be23ba9aSRobert Watson * MAC version FreeBSD versions 1021be23ba9aSRobert Watson * 1 5.x 1022be23ba9aSRobert Watson * 2 6.x 1023be23ba9aSRobert Watson * 3 7.x 10241cb99cfcSRobert Watson * 4 8.x 1025*50315501SAllan Jude * 5 14.x 1026be23ba9aSRobert Watson */ 1027*50315501SAllan Jude #define MAC_VERSION 5 1028be23ba9aSRobert Watson 10299162f64bSRobert Watson #define MAC_POLICY_SET(mpops, mpname, mpfullname, mpflags, privdata_wanted) \ 1030ddcdf265SRobert Watson static struct mac_policy_conf mpname##_mac_policy_conf = { \ 10316356dba0SRobert Watson .mpc_name = #mpname, \ 10326356dba0SRobert Watson .mpc_fullname = mpfullname, \ 10336356dba0SRobert Watson .mpc_ops = mpops, \ 10346356dba0SRobert Watson .mpc_loadtime_flags = mpflags, \ 10356356dba0SRobert Watson .mpc_field_off = privdata_wanted, \ 1036ddcdf265SRobert Watson }; \ 1037ddcdf265SRobert Watson static moduledata_t mpname##_mod = { \ 1038ddcdf265SRobert Watson #mpname, \ 1039ddcdf265SRobert Watson mac_policy_modevent, \ 1040ddcdf265SRobert Watson &mpname##_mac_policy_conf \ 1041ddcdf265SRobert Watson }; \ 1042be23ba9aSRobert Watson MODULE_DEPEND(mpname, kernel_mac_support, MAC_VERSION, \ 1043be23ba9aSRobert Watson MAC_VERSION, MAC_VERSION); \ 1044ddcdf265SRobert Watson DECLARE_MODULE(mpname, mpname##_mod, SI_SUB_MAC_POLICY, \ 1045ddcdf265SRobert Watson SI_ORDER_MIDDLE) 1046ddcdf265SRobert Watson 1047ddcdf265SRobert Watson int mac_policy_modevent(module_t mod, int type, void *data); 1048ddcdf265SRobert Watson 10498425ae12SRobert Watson /* 10508425ae12SRobert Watson * Policy interface to map a struct label pointer to per-policy data. 10518425ae12SRobert Watson * Typically, policies wrap this in their own accessor macro that casts a 10520142affcSRobert Watson * uintptr_t to a policy-specific data type. 10538425ae12SRobert Watson */ 10540142affcSRobert Watson intptr_t mac_label_get(struct label *l, int slot); 10550142affcSRobert Watson void mac_label_set(struct label *l, int slot, intptr_t v); 1056ddcdf265SRobert Watson 1057646a9f80SRobert Watson #endif /* !_SECURITY_MAC_MAC_POLICY_H_ */ 1058