xref: /freebsd/sys/security/mac_stub/mac_stub.c (revision 39beb93c3f8bdbf72a61fda42300b5ebed7390c8)
1 /*-
2  * Copyright (c) 1999-2002, 2007-2008 Robert N. M. Watson
3  * Copyright (c) 2001-2005 McAfee, Inc.
4  * Copyright (c) 2005-2006 SPARTA, Inc.
5  * Copyright (c) 2008 Apple Inc.
6  * All rights reserved.
7  *
8  * This software was developed by Robert Watson for the TrustedBSD Project.
9  *
10  * This software was developed for the FreeBSD Project in part by McAfee
11  * Research, the Security Research Division of McAfee, Inc. under
12  * DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA
13  * CHATS research program.
14  *
15  * This software was enhanced by SPARTA ISSO under SPAWAR contract
16  * N66001-04-C-6019 ("SEFOS").
17  *
18  * Redistribution and use in source and binary forms, with or without
19  * modification, are permitted provided that the following conditions
20  * are met:
21  * 1. Redistributions of source code must retain the above copyright
22  *    notice, this list of conditions and the following disclaimer.
23  * 2. Redistributions in binary form must reproduce the above copyright
24  *    notice, this list of conditions and the following disclaimer in the
25  *    documentation and/or other materials provided with the distribution.
26  *
27  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
28  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
29  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
30  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
31  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
32  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
33  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
34  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
35  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
36  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
37  * SUCH DAMAGE.
38  *
39  * $FreeBSD$
40  */
41 
42 /*
43  * Developed by the TrustedBSD Project.
44  *
45  * Stub module that implements a NOOP for most (if not all) MAC Framework
46  * policy entry points.
47  */
48 
49 #include <sys/types.h>
50 #include <sys/param.h>
51 #include <sys/acl.h>
52 #include <sys/conf.h>
53 #include <sys/extattr.h>
54 #include <sys/kernel.h>
55 #include <sys/ksem.h>
56 #include <sys/mount.h>
57 #include <sys/proc.h>
58 #include <sys/systm.h>
59 #include <sys/sysproto.h>
60 #include <sys/sysent.h>
61 #include <sys/vnode.h>
62 #include <sys/file.h>
63 #include <sys/socket.h>
64 #include <sys/socketvar.h>
65 #include <sys/pipe.h>
66 #include <sys/sx.h>
67 #include <sys/sysctl.h>
68 #include <sys/msg.h>
69 #include <sys/sem.h>
70 #include <sys/shm.h>
71 
72 #include <fs/devfs/devfs.h>
73 
74 #include <net/bpfdesc.h>
75 #include <net/if.h>
76 #include <net/if_types.h>
77 #include <net/if_var.h>
78 
79 #include <netinet/in.h>
80 #include <netinet/in_pcb.h>
81 #include <netinet/ip_var.h>
82 
83 #include <vm/vm.h>
84 
85 #include <security/mac/mac_policy.h>
86 
87 SYSCTL_DECL(_security_mac);
88 
89 SYSCTL_NODE(_security_mac, OID_AUTO, stub, CTLFLAG_RW, 0,
90     "TrustedBSD mac_stub policy controls");
91 
92 static int	stub_enabled = 1;
93 SYSCTL_INT(_security_mac_stub, OID_AUTO, enabled, CTLFLAG_RW,
94     &stub_enabled, 0, "Enforce mac_stub policy");
95 
96 /*
97  * Policy module operations.
98  */
99 static void
100 stub_destroy(struct mac_policy_conf *conf)
101 {
102 
103 }
104 
105 static void
106 stub_init(struct mac_policy_conf *conf)
107 {
108 
109 }
110 
111 static int
112 stub_syscall(struct thread *td, int call, void *arg)
113 {
114 
115 	return (0);
116 }
117 
118 /*
119  * Label operations.
120  */
121 static void
122 stub_init_label(struct label *label)
123 {
124 
125 }
126 
127 static int
128 stub_init_label_waitcheck(struct label *label, int flag)
129 {
130 
131 	return (0);
132 }
133 
134 static void
135 stub_destroy_label(struct label *label)
136 {
137 
138 }
139 
140 static void
141 stub_copy_label(struct label *src, struct label *dest)
142 {
143 
144 }
145 
146 static int
147 stub_externalize_label(struct label *label, char *element_name,
148     struct sbuf *sb, int *claimed)
149 {
150 
151 	return (0);
152 }
153 
154 static int
155 stub_internalize_label(struct label *label, char *element_name,
156     char *element_data, int *claimed)
157 {
158 
159 	return (0);
160 }
161 
162 /*
163  * Object-specific entry point imeplementations are sorted alphabetically by
164  * object type name and then by operation.
165  */
166 static int
167 stub_bpfdesc_check_receive(struct bpf_d *d, struct label *dlabel,
168     struct ifnet *ifp, struct label *ifplabel)
169 {
170 
171         return (0);
172 }
173 
174 static void
175 stub_bpfdesc_create(struct ucred *cred, struct bpf_d *d,
176     struct label *dlabel)
177 {
178 
179 }
180 
181 static void
182 stub_bpfdesc_create_mbuf(struct bpf_d *d, struct label *dlabel,
183     struct mbuf *m, struct label *mlabel)
184 {
185 
186 }
187 
188 static void
189 stub_cred_associate_nfsd(struct ucred *cred)
190 {
191 
192 }
193 
194 static int
195 stub_cred_check_relabel(struct ucred *cred, struct label *newlabel)
196 {
197 
198 	return (0);
199 }
200 
201 static int
202 stub_cred_check_visible(struct ucred *cr1, struct ucred *cr2)
203 {
204 
205 	return (0);
206 }
207 
208 static void
209 stub_cred_create_init(struct ucred *cred)
210 {
211 
212 }
213 
214 static void
215 stub_cred_create_swapper(struct ucred *cred)
216 {
217 
218 }
219 
220 static void
221 stub_cred_relabel(struct ucred *cred, struct label *newlabel)
222 {
223 
224 }
225 
226 static void
227 stub_devfs_create_device(struct ucred *cred, struct mount *mp,
228     struct cdev *dev, struct devfs_dirent *de, struct label *delabel)
229 {
230 
231 }
232 
233 static void
234 stub_devfs_create_directory(struct mount *mp, char *dirname,
235     int dirnamelen, struct devfs_dirent *de, struct label *delabel)
236 {
237 
238 }
239 
240 static void
241 stub_devfs_create_symlink(struct ucred *cred, struct mount *mp,
242     struct devfs_dirent *dd, struct label *ddlabel, struct devfs_dirent *de,
243     struct label *delabel)
244 {
245 
246 }
247 
248 static void
249 stub_devfs_update(struct mount *mp, struct devfs_dirent *de,
250     struct label *delabel, struct vnode *vp, struct label *vplabel)
251 {
252 
253 }
254 
255 static void
256 stub_devfs_vnode_associate(struct mount *mp, struct label *mplabel,
257     struct devfs_dirent *de, struct label *delabel, struct vnode *vp,
258     struct label *vplabel)
259 {
260 
261 }
262 
263 static int
264 stub_ifnet_check_relabel(struct ucred *cred, struct ifnet *ifp,
265     struct label *ifplabel, struct label *newlabel)
266 {
267 
268 	return (0);
269 }
270 
271 static int
272 stub_ifnet_check_transmit(struct ifnet *ifp, struct label *ifplabel,
273     struct mbuf *m, struct label *mlabel)
274 {
275 
276 	return (0);
277 }
278 
279 static void
280 stub_ifnet_create(struct ifnet *ifp, struct label *ifplabel)
281 {
282 
283 }
284 
285 static void
286 stub_ifnet_create_mbuf(struct ifnet *ifp, struct label *ifplabel,
287     struct mbuf *m, struct label *mlabel)
288 {
289 
290 }
291 
292 static void
293 stub_ifnet_relabel(struct ucred *cred, struct ifnet *ifp,
294     struct label *ifplabel, struct label *newlabel)
295 {
296 
297 }
298 
299 static int
300 stub_inpcb_check_deliver(struct inpcb *inp, struct label *inplabel,
301     struct mbuf *m, struct label *mlabel)
302 {
303 
304 	return (0);
305 }
306 
307 static void
308 stub_inpcb_create(struct socket *so, struct label *solabel,
309     struct inpcb *inp, struct label *inplabel)
310 {
311 
312 }
313 
314 static void
315 stub_inpcb_create_mbuf(struct inpcb *inp, struct label *inplabel,
316     struct mbuf *m, struct label *mlabel)
317 {
318 
319 }
320 
321 static void
322 stub_inpcb_sosetlabel(struct socket *so, struct label *solabel,
323     struct inpcb *inp, struct label *inplabel)
324 {
325 
326 }
327 
328 static void
329 stub_ip6q_create(struct mbuf *m, struct label *mlabel, struct ip6q *q6,
330     struct label *q6label)
331 {
332 
333 }
334 
335 static int
336 stub_ip6q_match(struct mbuf *m, struct label *mlabel, struct ip6q *q6,
337     struct label *q6label)
338 {
339 
340 	return (1);
341 }
342 
343 static void
344 stub_ip6q_reassemble(struct ip6q *q6, struct label *q6label, struct mbuf *m,
345     struct label *mlabel)
346 {
347 
348 }
349 
350 static void
351 stub_ip6q_update(struct mbuf *m, struct label *mlabel, struct ip6q *q6,
352     struct label *q6label)
353 {
354 
355 }
356 
357 static void
358 stub_ipq_create(struct mbuf *m, struct label *mlabel, struct ipq *q,
359     struct label *qlabel)
360 {
361 
362 }
363 
364 static int
365 stub_ipq_match(struct mbuf *m, struct label *mlabel, struct ipq *q,
366     struct label *qlabel)
367 {
368 
369 	return (1);
370 }
371 
372 static void
373 stub_ipq_reassemble(struct ipq *q, struct label *qlabel, struct mbuf *m,
374     struct label *mlabel)
375 {
376 
377 }
378 
379 static void
380 stub_ipq_update(struct mbuf *m, struct label *mlabel, struct ipq *q,
381     struct label *qlabel)
382 {
383 
384 }
385 
386 static int
387 stub_kenv_check_dump(struct ucred *cred)
388 {
389 
390 	return (0);
391 }
392 
393 static int
394 stub_kenv_check_get(struct ucred *cred, char *name)
395 {
396 
397 	return (0);
398 }
399 
400 static int
401 stub_kenv_check_set(struct ucred *cred, char *name, char *value)
402 {
403 
404 	return (0);
405 }
406 
407 static int
408 stub_kenv_check_unset(struct ucred *cred, char *name)
409 {
410 
411 	return (0);
412 }
413 
414 static int
415 stub_kld_check_load(struct ucred *cred, struct vnode *vp,
416     struct label *vplabel)
417 {
418 
419 	return (0);
420 }
421 
422 static int
423 stub_kld_check_stat(struct ucred *cred)
424 {
425 
426 	return (0);
427 }
428 
429 static int
430 stub_mount_check_stat(struct ucred *cred, struct mount *mp,
431     struct label *mplabel)
432 {
433 
434 	return (0);
435 }
436 
437 static void
438 stub_mount_create(struct ucred *cred, struct mount *mp,
439     struct label *mplabel)
440 {
441 
442 }
443 
444 static void
445 stub_netatalk_aarp_send(struct ifnet *ifp, struct label *iflpabel,
446     struct mbuf *m, struct label *mlabel)
447 {
448 
449 }
450 
451 static void
452 stub_netinet_arp_send(struct ifnet *ifp, struct label *iflpabel,
453     struct mbuf *m, struct label *mlabel)
454 {
455 
456 }
457 
458 static void
459 stub_netinet_firewall_reply(struct mbuf *mrecv, struct label *mrecvlabel,
460     struct mbuf *msend, struct label *msendlabel)
461 {
462 
463 }
464 
465 static void
466 stub_netinet_firewall_send(struct mbuf *m, struct label *mlabel)
467 {
468 
469 }
470 
471 static void
472 stub_netinet_fragment(struct mbuf *m, struct label *mlabel, struct mbuf *frag,
473     struct label *fraglabel)
474 {
475 
476 }
477 
478 static void
479 stub_netinet_icmp_reply(struct mbuf *mrecv, struct label *mrecvlabel,
480     struct mbuf *msend, struct label *msendlabel)
481 {
482 
483 }
484 
485 static void
486 stub_netinet_icmp_replyinplace(struct mbuf *m, struct label *mlabel)
487 {
488 
489 }
490 
491 static void
492 stub_netinet_igmp_send(struct ifnet *ifp, struct label *iflpabel,
493     struct mbuf *m, struct label *mlabel)
494 {
495 
496 }
497 
498 static void
499 stub_netinet_tcp_reply(struct mbuf *m, struct label *mlabel)
500 {
501 
502 }
503 
504 static void
505 stub_netinet6_nd6_send(struct ifnet *ifp, struct label *iflpabel,
506     struct mbuf *m, struct label *mlabel)
507 {
508 
509 }
510 
511 static int
512 stub_pipe_check_ioctl(struct ucred *cred, struct pipepair *pp,
513     struct label *pplabel, unsigned long cmd, void /* caddr_t */ *data)
514 {
515 
516 	return (0);
517 }
518 
519 static int
520 stub_pipe_check_poll(struct ucred *cred, struct pipepair *pp,
521     struct label *pplabel)
522 {
523 
524 	return (0);
525 }
526 
527 static int
528 stub_pipe_check_read(struct ucred *cred, struct pipepair *pp,
529     struct label *pplabel)
530 {
531 
532 	return (0);
533 }
534 
535 static int
536 stub_pipe_check_relabel(struct ucred *cred, struct pipepair *pp,
537     struct label *pplabel, struct label *newlabel)
538 {
539 
540 	return (0);
541 }
542 
543 static int
544 stub_pipe_check_stat(struct ucred *cred, struct pipepair *pp,
545     struct label *pplabel)
546 {
547 
548 	return (0);
549 }
550 
551 static int
552 stub_pipe_check_write(struct ucred *cred, struct pipepair *pp,
553     struct label *pplabel)
554 {
555 
556 	return (0);
557 }
558 
559 static void
560 stub_pipe_create(struct ucred *cred, struct pipepair *pp,
561     struct label *pplabel)
562 {
563 
564 }
565 
566 static void
567 stub_pipe_relabel(struct ucred *cred, struct pipepair *pp,
568     struct label *pplabel, struct label *newlabel)
569 {
570 
571 }
572 
573 static int
574 stub_posixsem_check_getvalue(struct ucred *active_cred, struct ucred *file_cred,
575     struct ksem *ks, struct label *kslabel)
576 {
577 
578 	return (0);
579 }
580 
581 static int
582 stub_posixsem_check_open(struct ucred *cred, struct ksem *ks,
583     struct label *kslabel)
584 {
585 
586 	return (0);
587 }
588 
589 static int
590 stub_posixsem_check_post(struct ucred *active_cred, struct ucred *file_cred,
591     struct ksem *ks, struct label *kslabel)
592 {
593 
594 	return (0);
595 }
596 
597 static int
598 stub_posixsem_check_stat(struct ucred *active_cred, struct ucred *file_cred,
599     struct ksem *ks, struct label *kslabel)
600 {
601 
602 	return (0);
603 }
604 
605 static int
606 stub_posixsem_check_unlink(struct ucred *cred, struct ksem *ks,
607     struct label *kslabel)
608 {
609 
610 	return (0);
611 }
612 
613 static int
614 stub_posixsem_check_wait(struct ucred *active_cred, struct ucred *file_cred,
615     struct ksem *ks, struct label *kslabel)
616 {
617 
618 	return (0);
619 }
620 
621 static void
622 stub_posixsem_create(struct ucred *cred, struct ksem *ks,
623     struct label *kslabel)
624 {
625 
626 }
627 
628 static int
629 stub_posixshm_check_mmap(struct ucred *cred, struct shmfd *shmfd,
630     struct label *shmlabel, int prot, int flags)
631 {
632 
633 	return (0);
634 }
635 
636 static int
637 stub_posixshm_check_open(struct ucred *cred, struct shmfd *shmfd,
638     struct label *shmlabel)
639 {
640 
641 	return (0);
642 }
643 
644 static int
645 stub_posixshm_check_stat(struct ucred *active_cred, struct ucred *file_cred,
646     struct shmfd *shmfd, struct label *shmlabel)
647 {
648 
649 	return (0);
650 }
651 
652 static int
653 stub_posixshm_check_truncate(struct ucred *active_cred,
654     struct ucred *file_cred, struct shmfd *shmfd, struct label *shmlabel)
655 {
656 
657 	return (0);
658 }
659 
660 static int
661 stub_posixshm_check_unlink(struct ucred *cred, struct shmfd *shmfd,
662     struct label *shmlabel)
663 {
664 
665 	return (0);
666 }
667 
668 static void
669 stub_posixshm_create(struct ucred *cred, struct shmfd *shmfd,
670     struct label *shmlabel)
671 {
672 
673 }
674 
675 static int
676 stub_priv_check(struct ucred *cred, int priv)
677 {
678 
679 	return (0);
680 }
681 
682 static int
683 stub_priv_grant(struct ucred *cred, int priv)
684 {
685 
686 	return (EPERM);
687 }
688 
689 static int
690 stub_proc_check_debug(struct ucred *cred, struct proc *p)
691 {
692 
693 	return (0);
694 }
695 
696 static int
697 stub_proc_check_sched(struct ucred *cred, struct proc *p)
698 {
699 
700 	return (0);
701 }
702 
703 static int
704 stub_proc_check_setaudit(struct ucred *cred, struct auditinfo *ai)
705 {
706 
707 	return (0);
708 }
709 
710 static int
711 stub_proc_check_setaudit_addr(struct ucred *cred, struct auditinfo_addr *aia)
712 {
713 
714 	return (0);
715 }
716 
717 static int
718 stub_proc_check_setauid(struct ucred *cred, uid_t auid)
719 {
720 
721 	return (0);
722 }
723 
724 static int
725 stub_proc_check_setegid(struct ucred *cred, gid_t egid)
726 {
727 
728 	return (0);
729 }
730 
731 static int
732 stub_proc_check_seteuid(struct ucred *cred, uid_t euid)
733 {
734 
735 	return (0);
736 }
737 
738 static int
739 stub_proc_check_setgid(struct ucred *cred, gid_t gid)
740 {
741 
742 	return (0);
743 }
744 
745 static int
746 stub_proc_check_setgroups(struct ucred *cred, int ngroups,
747 	gid_t *gidset)
748 {
749 
750 	return (0);
751 }
752 
753 static int
754 stub_proc_check_setregid(struct ucred *cred, gid_t rgid, gid_t egid)
755 {
756 
757 	return (0);
758 }
759 
760 static int
761 stub_proc_check_setresgid(struct ucred *cred, gid_t rgid, gid_t egid,
762 	gid_t sgid)
763 {
764 
765 	return (0);
766 }
767 
768 static int
769 stub_proc_check_setresuid(struct ucred *cred, uid_t ruid, uid_t euid,
770 	uid_t suid)
771 {
772 
773 	return (0);
774 }
775 
776 static int
777 stub_proc_check_setreuid(struct ucred *cred, uid_t ruid, uid_t euid)
778 {
779 
780 	return (0);
781 }
782 
783 static int
784 stub_proc_check_setuid(struct ucred *cred, uid_t uid)
785 {
786 
787 	return (0);
788 }
789 
790 static int
791 stub_proc_check_signal(struct ucred *cred, struct proc *p, int signum)
792 {
793 
794 	return (0);
795 }
796 
797 static int
798 stub_proc_check_wait(struct ucred *cred, struct proc *p)
799 {
800 
801 	return (0);
802 }
803 
804 static int
805 stub_socket_check_accept(struct ucred *cred, struct socket *so,
806     struct label *solabel)
807 {
808 
809 	return (0);
810 }
811 
812 static int
813 stub_socket_check_bind(struct ucred *cred, struct socket *so,
814     struct label *solabel, struct sockaddr *sa)
815 {
816 
817 	return (0);
818 }
819 
820 static int
821 stub_socket_check_connect(struct ucred *cred, struct socket *so,
822     struct label *solabel, struct sockaddr *sa)
823 {
824 
825 	return (0);
826 }
827 
828 static int
829 stub_socket_check_create(struct ucred *cred, int domain, int type, int proto)
830 {
831 
832 	return (0);
833 }
834 
835 static int
836 stub_socket_check_deliver(struct socket *so, struct label *solabel,
837     struct mbuf *m, struct label *mlabel)
838 {
839 
840 	return (0);
841 }
842 
843 static int
844 stub_socket_check_listen(struct ucred *cred, struct socket *so,
845     struct label *solabel)
846 {
847 
848 	return (0);
849 }
850 
851 static int
852 stub_socket_check_poll(struct ucred *cred, struct socket *so,
853     struct label *solabel)
854 {
855 
856 	return (0);
857 }
858 
859 static int
860 stub_socket_check_receive(struct ucred *cred, struct socket *so,
861     struct label *solabel)
862 {
863 
864 	return (0);
865 }
866 
867 static int
868 stub_socket_check_relabel(struct ucred *cred, struct socket *so,
869     struct label *solabel, struct label *newlabel)
870 {
871 
872 	return (0);
873 }
874 static int
875 stub_socket_check_send(struct ucred *cred, struct socket *so,
876     struct label *solabel)
877 {
878 
879 	return (0);
880 }
881 
882 static int
883 stub_socket_check_stat(struct ucred *cred, struct socket *so,
884     struct label *solabel)
885 {
886 
887 	return (0);
888 }
889 
890 static int
891 stub_inpcb_check_visible(struct ucred *cred, struct inpcb *inp,
892    struct label *inplabel)
893 {
894 
895 	return (0);
896 }
897 
898 static int
899 stub_socket_check_visible(struct ucred *cred, struct socket *so,
900    struct label *solabel)
901 {
902 
903 	return (0);
904 }
905 
906 static void
907 stub_socket_create(struct ucred *cred, struct socket *so,
908     struct label *solabel)
909 {
910 
911 }
912 
913 static void
914 stub_socket_create_mbuf(struct socket *so, struct label *solabel,
915     struct mbuf *m, struct label *mlabel)
916 {
917 
918 }
919 
920 static void
921 stub_socket_newconn(struct socket *oldso, struct label *oldsolabel,
922     struct socket *newso, struct label *newsolabel)
923 {
924 
925 }
926 
927 static void
928 stub_socket_relabel(struct ucred *cred, struct socket *so,
929     struct label *solabel, struct label *newlabel)
930 {
931 
932 }
933 
934 static void
935 stub_socketpeer_set_from_mbuf(struct mbuf *m, struct label *mlabel,
936     struct socket *so, struct label *sopeerlabel)
937 {
938 
939 }
940 
941 static void
942 stub_socketpeer_set_from_socket(struct socket *oldso,
943     struct label *oldsolabel, struct socket *newso,
944     struct label *newsopeerlabel)
945 {
946 
947 }
948 
949 static void
950 stub_syncache_create(struct label *label, struct inpcb *inp)
951 {
952 
953 }
954 
955 static void
956 stub_syncache_create_mbuf(struct label *sc_label, struct mbuf *m,
957     struct label *mlabel)
958 {
959 
960 }
961 
962 static int
963 stub_system_check_acct(struct ucred *cred, struct vnode *vp,
964     struct label *vplabel)
965 {
966 
967 	return (0);
968 }
969 
970 static int
971 stub_system_check_audit(struct ucred *cred, void *record, int length)
972 {
973 
974 	return (0);
975 }
976 
977 static int
978 stub_system_check_auditctl(struct ucred *cred, struct vnode *vp,
979     struct label *vplabel)
980 {
981 
982 	return (0);
983 }
984 
985 static int
986 stub_system_check_auditon(struct ucred *cred, int cmd)
987 {
988 
989 	return (0);
990 }
991 
992 static int
993 stub_system_check_reboot(struct ucred *cred, int how)
994 {
995 
996 	return (0);
997 }
998 
999 static int
1000 stub_system_check_swapoff(struct ucred *cred, struct vnode *vp,
1001     struct label *vplabel)
1002 {
1003 
1004 	return (0);
1005 }
1006 
1007 static int
1008 stub_system_check_swapon(struct ucred *cred, struct vnode *vp,
1009     struct label *vplabel)
1010 {
1011 
1012 	return (0);
1013 }
1014 
1015 static int
1016 stub_system_check_sysctl(struct ucred *cred, struct sysctl_oid *oidp,
1017     void *arg1, int arg2, struct sysctl_req *req)
1018 {
1019 
1020 	return (0);
1021 }
1022 
1023 static void
1024 stub_sysvmsg_cleanup(struct label *msglabel)
1025 {
1026 
1027 }
1028 
1029 static void
1030 stub_sysvmsg_create(struct ucred *cred, struct msqid_kernel *msqkptr,
1031     struct label *msqlabel, struct msg *msgptr, struct label *msglabel)
1032 {
1033 
1034 }
1035 
1036 static int
1037 stub_sysvmsq_check_msgmsq(struct ucred *cred, struct msg *msgptr,
1038     struct label *msglabel, struct msqid_kernel *msqkptr,
1039     struct label *msqklabel)
1040 {
1041 
1042 	return (0);
1043 }
1044 
1045 static int
1046 stub_sysvmsq_check_msgrcv(struct ucred *cred, struct msg *msgptr,
1047     struct label *msglabel)
1048 {
1049 
1050 	return (0);
1051 }
1052 
1053 
1054 static int
1055 stub_sysvmsq_check_msgrmid(struct ucred *cred, struct msg *msgptr,
1056     struct label *msglabel)
1057 {
1058 
1059 	return (0);
1060 }
1061 
1062 
1063 static int
1064 stub_sysvmsq_check_msqget(struct ucred *cred, struct msqid_kernel *msqkptr,
1065     struct label *msqklabel)
1066 {
1067 
1068 	return (0);
1069 }
1070 
1071 
1072 static int
1073 stub_sysvmsq_check_msqsnd(struct ucred *cred, struct msqid_kernel *msqkptr,
1074     struct label *msqklabel)
1075 {
1076 
1077 	return (0);
1078 }
1079 
1080 static int
1081 stub_sysvmsq_check_msqrcv(struct ucred *cred, struct msqid_kernel *msqkptr,
1082     struct label *msqklabel)
1083 {
1084 
1085 	return (0);
1086 }
1087 
1088 
1089 static int
1090 stub_sysvmsq_check_msqctl(struct ucred *cred, struct msqid_kernel *msqkptr,
1091     struct label *msqklabel, int cmd)
1092 {
1093 
1094 	return (0);
1095 }
1096 
1097 
1098 static void
1099 stub_sysvmsq_cleanup(struct label *msqlabel)
1100 {
1101 
1102 }
1103 
1104 static void
1105 stub_sysvmsq_create(struct ucred *cred, struct msqid_kernel *msqkptr,
1106     struct label *msqlabel)
1107 {
1108 
1109 }
1110 
1111 static int
1112 stub_sysvsem_check_semctl(struct ucred *cred, struct semid_kernel *semakptr,
1113     struct label *semaklabel, int cmd)
1114 {
1115 
1116 	return (0);
1117 }
1118 
1119 static int
1120 stub_sysvsem_check_semget(struct ucred *cred, struct semid_kernel *semakptr,
1121     struct label *semaklabel)
1122 {
1123 
1124 	return (0);
1125 }
1126 
1127 
1128 static int
1129 stub_sysvsem_check_semop(struct ucred *cred, struct semid_kernel *semakptr,
1130     struct label *semaklabel, size_t accesstype)
1131 {
1132 
1133 	return (0);
1134 }
1135 
1136 static void
1137 stub_sysvsem_cleanup(struct label *semalabel)
1138 {
1139 
1140 }
1141 
1142 static void
1143 stub_sysvsem_create(struct ucred *cred, struct semid_kernel *semakptr,
1144     struct label *semalabel)
1145 {
1146 
1147 }
1148 
1149 static int
1150 stub_sysvshm_check_shmat(struct ucred *cred, struct shmid_kernel *shmsegptr,
1151     struct label *shmseglabel, int shmflg)
1152 {
1153 
1154 	return (0);
1155 }
1156 
1157 static int
1158 stub_sysvshm_check_shmctl(struct ucred *cred, struct shmid_kernel *shmsegptr,
1159     struct label *shmseglabel, int cmd)
1160 {
1161 
1162 	return (0);
1163 }
1164 
1165 static int
1166 stub_sysvshm_check_shmdt(struct ucred *cred, struct shmid_kernel *shmsegptr,
1167     struct label *shmseglabel)
1168 {
1169 
1170 	return (0);
1171 }
1172 
1173 
1174 static int
1175 stub_sysvshm_check_shmget(struct ucred *cred, struct shmid_kernel *shmsegptr,
1176     struct label *shmseglabel, int shmflg)
1177 {
1178 
1179 	return (0);
1180 }
1181 
1182 static void
1183 stub_sysvshm_cleanup(struct label *shmlabel)
1184 {
1185 
1186 }
1187 
1188 static void
1189 stub_sysvshm_create(struct ucred *cred, struct shmid_kernel *shmsegptr,
1190     struct label *shmalabel)
1191 {
1192 
1193 }
1194 
1195 static void
1196 stub_thread_userret(struct thread *td)
1197 {
1198 
1199 }
1200 
1201 static int
1202 stub_vnode_associate_extattr(struct mount *mp, struct label *mplabel,
1203     struct vnode *vp, struct label *vplabel)
1204 {
1205 
1206 	return (0);
1207 }
1208 
1209 static void
1210 stub_vnode_associate_singlelabel(struct mount *mp, struct label *mplabel,
1211     struct vnode *vp, struct label *vplabel)
1212 {
1213 
1214 }
1215 
1216 static int
1217 stub_vnode_check_access(struct ucred *cred, struct vnode *vp,
1218     struct label *vplabel, accmode_t accmode)
1219 {
1220 
1221 	return (0);
1222 }
1223 
1224 static int
1225 stub_vnode_check_chdir(struct ucred *cred, struct vnode *dvp,
1226     struct label *dvplabel)
1227 {
1228 
1229 	return (0);
1230 }
1231 
1232 static int
1233 stub_vnode_check_chroot(struct ucred *cred, struct vnode *dvp,
1234     struct label *dvplabel)
1235 {
1236 
1237 	return (0);
1238 }
1239 
1240 static int
1241 stub_vnode_check_create(struct ucred *cred, struct vnode *dvp,
1242     struct label *dvplabel, struct componentname *cnp, struct vattr *vap)
1243 {
1244 
1245 	return (0);
1246 }
1247 
1248 static int
1249 stub_vnode_check_deleteacl(struct ucred *cred, struct vnode *vp,
1250     struct label *vplabel, acl_type_t type)
1251 {
1252 
1253 	return (0);
1254 }
1255 
1256 static int
1257 stub_vnode_check_deleteextattr(struct ucred *cred, struct vnode *vp,
1258     struct label *vplabel, int attrnamespace, const char *name)
1259 {
1260 
1261 	return (0);
1262 }
1263 
1264 static int
1265 stub_vnode_check_exec(struct ucred *cred, struct vnode *vp,
1266     struct label *vplabel, struct image_params *imgp,
1267     struct label *execlabel)
1268 {
1269 
1270 	return (0);
1271 }
1272 
1273 static int
1274 stub_vnode_check_getacl(struct ucred *cred, struct vnode *vp,
1275     struct label *vplabel, acl_type_t type)
1276 {
1277 
1278 	return (0);
1279 }
1280 
1281 static int
1282 stub_vnode_check_getextattr(struct ucred *cred, struct vnode *vp,
1283     struct label *vplabel, int attrnamespace, const char *name,
1284     struct uio *uio)
1285 {
1286 
1287 	return (0);
1288 }
1289 
1290 static int
1291 stub_vnode_check_link(struct ucred *cred, struct vnode *dvp,
1292     struct label *dvplabel, struct vnode *vp, struct label *vplabel,
1293     struct componentname *cnp)
1294 {
1295 
1296 	return (0);
1297 }
1298 
1299 static int
1300 stub_vnode_check_listextattr(struct ucred *cred, struct vnode *vp,
1301     struct label *vplabel, int attrnamespace)
1302 {
1303 
1304 	return (0);
1305 }
1306 
1307 static int
1308 stub_vnode_check_lookup(struct ucred *cred, struct vnode *dvp,
1309     struct label *dvplabel, struct componentname *cnp)
1310 {
1311 
1312 	return (0);
1313 }
1314 
1315 static int
1316 stub_vnode_check_mmap(struct ucred *cred, struct vnode *vp,
1317     struct label *vplabel, int prot, int flags)
1318 {
1319 
1320 	return (0);
1321 }
1322 
1323 static void
1324 stub_vnode_check_mmap_downgrade(struct ucred *cred, struct vnode *vp,
1325     struct label *vplabel, int *prot)
1326 {
1327 
1328 }
1329 
1330 static int
1331 stub_vnode_check_mprotect(struct ucred *cred, struct vnode *vp,
1332     struct label *vplabel, int prot)
1333 {
1334 
1335 	return (0);
1336 }
1337 
1338 static int
1339 stub_vnode_check_open(struct ucred *cred, struct vnode *vp,
1340     struct label *vplabel, accmode_t accmode)
1341 {
1342 
1343 	return (0);
1344 }
1345 
1346 static int
1347 stub_vnode_check_poll(struct ucred *active_cred, struct ucred *file_cred,
1348     struct vnode *vp, struct label *vplabel)
1349 {
1350 
1351 	return (0);
1352 }
1353 
1354 static int
1355 stub_vnode_check_read(struct ucred *active_cred, struct ucred *file_cred,
1356     struct vnode *vp, struct label *vplabel)
1357 {
1358 
1359 	return (0);
1360 }
1361 
1362 static int
1363 stub_vnode_check_readdir(struct ucred *cred, struct vnode *vp,
1364     struct label *dvplabel)
1365 {
1366 
1367 	return (0);
1368 }
1369 
1370 static int
1371 stub_vnode_check_readlink(struct ucred *cred, struct vnode *vp,
1372     struct label *vplabel)
1373 {
1374 
1375 	return (0);
1376 }
1377 
1378 static int
1379 stub_vnode_check_relabel(struct ucred *cred, struct vnode *vp,
1380     struct label *vplabel, struct label *newlabel)
1381 {
1382 
1383 	return (0);
1384 }
1385 
1386 static int
1387 stub_vnode_check_rename_from(struct ucred *cred, struct vnode *dvp,
1388     struct label *dvplabel, struct vnode *vp, struct label *vplabel,
1389     struct componentname *cnp)
1390 {
1391 
1392 	return (0);
1393 }
1394 
1395 static int
1396 stub_vnode_check_rename_to(struct ucred *cred, struct vnode *dvp,
1397     struct label *dvplabel, struct vnode *vp, struct label *vplabel,
1398     int samedir, struct componentname *cnp)
1399 {
1400 
1401 	return (0);
1402 }
1403 
1404 static int
1405 stub_vnode_check_revoke(struct ucred *cred, struct vnode *vp,
1406     struct label *vplabel)
1407 {
1408 
1409 	return (0);
1410 }
1411 
1412 static int
1413 stub_vnode_check_setacl(struct ucred *cred, struct vnode *vp,
1414     struct label *vplabel, acl_type_t type, struct acl *acl)
1415 {
1416 
1417 	return (0);
1418 }
1419 
1420 static int
1421 stub_vnode_check_setextattr(struct ucred *cred, struct vnode *vp,
1422     struct label *vplabel, int attrnamespace, const char *name,
1423     struct uio *uio)
1424 {
1425 
1426 	return (0);
1427 }
1428 
1429 static int
1430 stub_vnode_check_setflags(struct ucred *cred, struct vnode *vp,
1431     struct label *vplabel, u_long flags)
1432 {
1433 
1434 	return (0);
1435 }
1436 
1437 static int
1438 stub_vnode_check_setmode(struct ucred *cred, struct vnode *vp,
1439     struct label *vplabel, mode_t mode)
1440 {
1441 
1442 	return (0);
1443 }
1444 
1445 static int
1446 stub_vnode_check_setowner(struct ucred *cred, struct vnode *vp,
1447     struct label *vplabel, uid_t uid, gid_t gid)
1448 {
1449 
1450 	return (0);
1451 }
1452 
1453 static int
1454 stub_vnode_check_setutimes(struct ucred *cred, struct vnode *vp,
1455     struct label *vplabel, struct timespec atime, struct timespec mtime)
1456 {
1457 
1458 	return (0);
1459 }
1460 
1461 static int
1462 stub_vnode_check_stat(struct ucred *active_cred, struct ucred *file_cred,
1463     struct vnode *vp, struct label *vplabel)
1464 {
1465 
1466 	return (0);
1467 }
1468 
1469 static int
1470 stub_vnode_check_unlink(struct ucred *cred, struct vnode *dvp,
1471     struct label *dvplabel, struct vnode *vp, struct label *vplabel,
1472     struct componentname *cnp)
1473 {
1474 
1475 	return (0);
1476 }
1477 
1478 static int
1479 stub_vnode_check_write(struct ucred *active_cred, struct ucred *file_cred,
1480     struct vnode *vp, struct label *vplabel)
1481 {
1482 
1483 	return (0);
1484 }
1485 
1486 static int
1487 stub_vnode_create_extattr(struct ucred *cred, struct mount *mp,
1488     struct label *mntlabel, struct vnode *dvp, struct label *dvplabel,
1489     struct vnode *vp, struct label *vplabel, struct componentname *cnp)
1490 {
1491 
1492 	return (0);
1493 }
1494 
1495 static void
1496 stub_vnode_execve_transition(struct ucred *old, struct ucred *new,
1497     struct vnode *vp, struct label *vplabel, struct label *interpvplabel,
1498     struct image_params *imgp, struct label *execlabel)
1499 {
1500 
1501 }
1502 
1503 static int
1504 stub_vnode_execve_will_transition(struct ucred *old, struct vnode *vp,
1505     struct label *vplabel, struct label *interpvplabel,
1506     struct image_params *imgp, struct label *execlabel)
1507 {
1508 
1509 	return (0);
1510 }
1511 
1512 static void
1513 stub_vnode_relabel(struct ucred *cred, struct vnode *vp,
1514     struct label *vplabel, struct label *label)
1515 {
1516 
1517 }
1518 
1519 static int
1520 stub_vnode_setlabel_extattr(struct ucred *cred, struct vnode *vp,
1521     struct label *vplabel, struct label *intlabel)
1522 {
1523 
1524 	return (0);
1525 }
1526 
1527 /*
1528  * Register functions with MAC Framework policy entry points.
1529  */
1530 static struct mac_policy_ops stub_ops =
1531 {
1532 	.mpo_destroy = stub_destroy,
1533 	.mpo_init = stub_init,
1534 	.mpo_syscall = stub_syscall,
1535 
1536 	.mpo_bpfdesc_check_receive = stub_bpfdesc_check_receive,
1537 	.mpo_bpfdesc_create = stub_bpfdesc_create,
1538 	.mpo_bpfdesc_create_mbuf = stub_bpfdesc_create_mbuf,
1539 	.mpo_bpfdesc_destroy_label = stub_destroy_label,
1540 	.mpo_bpfdesc_init_label = stub_init_label,
1541 
1542 	.mpo_cred_associate_nfsd = stub_cred_associate_nfsd,
1543 	.mpo_cred_check_relabel = stub_cred_check_relabel,
1544 	.mpo_cred_check_visible = stub_cred_check_visible,
1545 	.mpo_cred_copy_label = stub_copy_label,
1546 	.mpo_cred_create_init = stub_cred_create_init,
1547 	.mpo_cred_create_swapper = stub_cred_create_swapper,
1548 	.mpo_cred_destroy_label = stub_destroy_label,
1549 	.mpo_cred_externalize_label = stub_externalize_label,
1550 	.mpo_cred_init_label = stub_init_label,
1551 	.mpo_cred_internalize_label = stub_internalize_label,
1552 	.mpo_cred_relabel= stub_cred_relabel,
1553 
1554 	.mpo_devfs_create_device = stub_devfs_create_device,
1555 	.mpo_devfs_create_directory = stub_devfs_create_directory,
1556 	.mpo_devfs_create_symlink = stub_devfs_create_symlink,
1557 	.mpo_devfs_destroy_label = stub_destroy_label,
1558 	.mpo_devfs_init_label = stub_init_label,
1559 	.mpo_devfs_update = stub_devfs_update,
1560 	.mpo_devfs_vnode_associate = stub_devfs_vnode_associate,
1561 
1562 	.mpo_ifnet_check_relabel = stub_ifnet_check_relabel,
1563 	.mpo_ifnet_check_transmit = stub_ifnet_check_transmit,
1564 	.mpo_ifnet_copy_label = stub_copy_label,
1565 	.mpo_ifnet_create = stub_ifnet_create,
1566 	.mpo_ifnet_create_mbuf = stub_ifnet_create_mbuf,
1567 	.mpo_ifnet_destroy_label = stub_destroy_label,
1568 	.mpo_ifnet_externalize_label = stub_externalize_label,
1569 	.mpo_ifnet_init_label = stub_init_label,
1570 	.mpo_ifnet_internalize_label = stub_internalize_label,
1571 	.mpo_ifnet_relabel = stub_ifnet_relabel,
1572 
1573 	.mpo_inpcb_check_deliver = stub_inpcb_check_deliver,
1574 	.mpo_inpcb_check_visible = stub_inpcb_check_visible,
1575 	.mpo_inpcb_create = stub_inpcb_create,
1576 	.mpo_inpcb_create_mbuf = stub_inpcb_create_mbuf,
1577 	.mpo_inpcb_destroy_label = stub_destroy_label,
1578 	.mpo_inpcb_init_label = stub_init_label_waitcheck,
1579 	.mpo_inpcb_sosetlabel = stub_inpcb_sosetlabel,
1580 
1581 	.mpo_ip6q_create = stub_ip6q_create,
1582 	.mpo_ip6q_destroy_label = stub_destroy_label,
1583 	.mpo_ip6q_init_label = stub_init_label_waitcheck,
1584 	.mpo_ip6q_match = stub_ip6q_match,
1585 	.mpo_ip6q_update = stub_ip6q_update,
1586 	.mpo_ip6q_reassemble = stub_ip6q_reassemble,
1587 
1588 	.mpo_ipq_create = stub_ipq_create,
1589 	.mpo_ipq_destroy_label = stub_destroy_label,
1590 	.mpo_ipq_init_label = stub_init_label_waitcheck,
1591 	.mpo_ipq_match = stub_ipq_match,
1592 	.mpo_ipq_update = stub_ipq_update,
1593 	.mpo_ipq_reassemble = stub_ipq_reassemble,
1594 
1595 	.mpo_kenv_check_dump = stub_kenv_check_dump,
1596 	.mpo_kenv_check_get = stub_kenv_check_get,
1597 	.mpo_kenv_check_set = stub_kenv_check_set,
1598 	.mpo_kenv_check_unset = stub_kenv_check_unset,
1599 
1600 	.mpo_kld_check_load = stub_kld_check_load,
1601 	.mpo_kld_check_stat = stub_kld_check_stat,
1602 
1603 	.mpo_mbuf_copy_label = stub_copy_label,
1604 	.mpo_mbuf_destroy_label = stub_destroy_label,
1605 	.mpo_mbuf_init_label = stub_init_label_waitcheck,
1606 
1607 	.mpo_mount_check_stat = stub_mount_check_stat,
1608 	.mpo_mount_create = stub_mount_create,
1609 	.mpo_mount_destroy_label = stub_destroy_label,
1610 	.mpo_mount_init_label = stub_init_label,
1611 
1612 	.mpo_netatalk_aarp_send = stub_netatalk_aarp_send,
1613 
1614 	.mpo_netinet_arp_send = stub_netinet_arp_send,
1615 	.mpo_netinet_firewall_reply = stub_netinet_firewall_reply,
1616 	.mpo_netinet_firewall_send = stub_netinet_firewall_send,
1617 	.mpo_netinet_fragment = stub_netinet_fragment,
1618 	.mpo_netinet_icmp_reply = stub_netinet_icmp_reply,
1619 	.mpo_netinet_icmp_replyinplace = stub_netinet_icmp_replyinplace,
1620 	.mpo_netinet_tcp_reply = stub_netinet_tcp_reply,
1621 	.mpo_netinet_igmp_send = stub_netinet_igmp_send,
1622 
1623 	.mpo_netinet6_nd6_send = stub_netinet6_nd6_send,
1624 
1625 	.mpo_pipe_check_ioctl = stub_pipe_check_ioctl,
1626 	.mpo_pipe_check_poll = stub_pipe_check_poll,
1627 	.mpo_pipe_check_read = stub_pipe_check_read,
1628 	.mpo_pipe_check_relabel = stub_pipe_check_relabel,
1629 	.mpo_pipe_check_stat = stub_pipe_check_stat,
1630 	.mpo_pipe_check_write = stub_pipe_check_write,
1631 	.mpo_pipe_copy_label = stub_copy_label,
1632 	.mpo_pipe_create = stub_pipe_create,
1633 	.mpo_pipe_destroy_label = stub_destroy_label,
1634 	.mpo_pipe_externalize_label = stub_externalize_label,
1635 	.mpo_pipe_init_label = stub_init_label,
1636 	.mpo_pipe_internalize_label = stub_internalize_label,
1637 	.mpo_pipe_relabel = stub_pipe_relabel,
1638 
1639 	.mpo_posixsem_check_getvalue = stub_posixsem_check_getvalue,
1640 	.mpo_posixsem_check_open = stub_posixsem_check_open,
1641 	.mpo_posixsem_check_post = stub_posixsem_check_post,
1642 	.mpo_posixsem_check_stat = stub_posixsem_check_stat,
1643 	.mpo_posixsem_check_unlink = stub_posixsem_check_unlink,
1644 	.mpo_posixsem_check_wait = stub_posixsem_check_wait,
1645 	.mpo_posixsem_create = stub_posixsem_create,
1646 	.mpo_posixsem_destroy_label = stub_destroy_label,
1647 	.mpo_posixsem_init_label = stub_init_label,
1648 
1649 	.mpo_posixshm_check_mmap = stub_posixshm_check_mmap,
1650 	.mpo_posixshm_check_open = stub_posixshm_check_open,
1651 	.mpo_posixshm_check_stat = stub_posixshm_check_stat,
1652 	.mpo_posixshm_check_truncate = stub_posixshm_check_truncate,
1653 	.mpo_posixshm_check_unlink = stub_posixshm_check_unlink,
1654 	.mpo_posixshm_create = stub_posixshm_create,
1655 	.mpo_posixshm_destroy_label = stub_destroy_label,
1656 	.mpo_posixshm_init_label = stub_init_label,
1657 
1658 	.mpo_priv_check = stub_priv_check,
1659 	.mpo_priv_grant = stub_priv_grant,
1660 
1661 	.mpo_proc_check_debug = stub_proc_check_debug,
1662 	.mpo_proc_check_sched = stub_proc_check_sched,
1663 	.mpo_proc_check_setaudit = stub_proc_check_setaudit,
1664 	.mpo_proc_check_setaudit_addr = stub_proc_check_setaudit_addr,
1665 	.mpo_proc_check_setauid = stub_proc_check_setauid,
1666 	.mpo_proc_check_setegid = stub_proc_check_setegid,
1667 	.mpo_proc_check_seteuid = stub_proc_check_seteuid,
1668 	.mpo_proc_check_setgid = stub_proc_check_setgid,
1669 	.mpo_proc_check_setgroups = stub_proc_check_setgroups,
1670 	.mpo_proc_check_setregid = stub_proc_check_setregid,
1671 	.mpo_proc_check_setresgid = stub_proc_check_setresgid,
1672 	.mpo_proc_check_setresuid = stub_proc_check_setresuid,
1673 	.mpo_proc_check_setreuid = stub_proc_check_setreuid,
1674 	.mpo_proc_check_setuid = stub_proc_check_setuid,
1675 	.mpo_proc_check_signal = stub_proc_check_signal,
1676 	.mpo_proc_check_wait = stub_proc_check_wait,
1677 
1678 	.mpo_socket_check_accept = stub_socket_check_accept,
1679 	.mpo_socket_check_bind = stub_socket_check_bind,
1680 	.mpo_socket_check_connect = stub_socket_check_connect,
1681 	.mpo_socket_check_create = stub_socket_check_create,
1682 	.mpo_socket_check_deliver = stub_socket_check_deliver,
1683 	.mpo_socket_check_listen = stub_socket_check_listen,
1684 	.mpo_socket_check_poll = stub_socket_check_poll,
1685 	.mpo_socket_check_receive = stub_socket_check_receive,
1686 	.mpo_socket_check_relabel = stub_socket_check_relabel,
1687 	.mpo_socket_check_send = stub_socket_check_send,
1688 	.mpo_socket_check_stat = stub_socket_check_stat,
1689 	.mpo_socket_check_visible = stub_socket_check_visible,
1690 	.mpo_socket_copy_label = stub_copy_label,
1691 	.mpo_socket_create = stub_socket_create,
1692 	.mpo_socket_create_mbuf = stub_socket_create_mbuf,
1693 	.mpo_socket_destroy_label = stub_destroy_label,
1694 	.mpo_socket_externalize_label = stub_externalize_label,
1695 	.mpo_socket_init_label = stub_init_label_waitcheck,
1696 	.mpo_socket_internalize_label = stub_internalize_label,
1697 	.mpo_socket_newconn = stub_socket_newconn,
1698 	.mpo_socket_relabel = stub_socket_relabel,
1699 
1700 	.mpo_socketpeer_destroy_label = stub_destroy_label,
1701 	.mpo_socketpeer_externalize_label = stub_externalize_label,
1702 	.mpo_socketpeer_init_label = stub_init_label_waitcheck,
1703 	.mpo_socketpeer_set_from_mbuf = stub_socketpeer_set_from_mbuf,
1704 	.mpo_socketpeer_set_from_socket = stub_socketpeer_set_from_socket,
1705 
1706 	.mpo_syncache_init_label = stub_init_label_waitcheck,
1707 	.mpo_syncache_destroy_label = stub_destroy_label,
1708 	.mpo_syncache_create = stub_syncache_create,
1709 	.mpo_syncache_create_mbuf= stub_syncache_create_mbuf,
1710 
1711 	.mpo_sysvmsg_cleanup = stub_sysvmsg_cleanup,
1712 	.mpo_sysvmsg_create = stub_sysvmsg_create,
1713 	.mpo_sysvmsg_destroy_label = stub_destroy_label,
1714 	.mpo_sysvmsg_init_label = stub_init_label,
1715 
1716 	.mpo_sysvmsq_check_msgmsq = stub_sysvmsq_check_msgmsq,
1717 	.mpo_sysvmsq_check_msgrcv = stub_sysvmsq_check_msgrcv,
1718 	.mpo_sysvmsq_check_msgrmid = stub_sysvmsq_check_msgrmid,
1719 	.mpo_sysvmsq_check_msqget = stub_sysvmsq_check_msqget,
1720 	.mpo_sysvmsq_check_msqsnd = stub_sysvmsq_check_msqsnd,
1721 	.mpo_sysvmsq_check_msqrcv = stub_sysvmsq_check_msqrcv,
1722 	.mpo_sysvmsq_check_msqctl = stub_sysvmsq_check_msqctl,
1723 	.mpo_sysvmsq_cleanup = stub_sysvmsq_cleanup,
1724 	.mpo_sysvmsq_create = stub_sysvmsq_create,
1725 	.mpo_sysvmsq_destroy_label = stub_destroy_label,
1726 	.mpo_sysvmsq_init_label = stub_init_label,
1727 
1728 	.mpo_sysvsem_check_semctl = stub_sysvsem_check_semctl,
1729 	.mpo_sysvsem_check_semget = stub_sysvsem_check_semget,
1730 	.mpo_sysvsem_check_semop = stub_sysvsem_check_semop,
1731 	.mpo_sysvsem_cleanup = stub_sysvsem_cleanup,
1732 	.mpo_sysvsem_create = stub_sysvsem_create,
1733 	.mpo_sysvsem_destroy_label = stub_destroy_label,
1734 	.mpo_sysvsem_init_label = stub_init_label,
1735 
1736 	.mpo_sysvshm_check_shmat = stub_sysvshm_check_shmat,
1737 	.mpo_sysvshm_check_shmctl = stub_sysvshm_check_shmctl,
1738 	.mpo_sysvshm_check_shmdt = stub_sysvshm_check_shmdt,
1739 	.mpo_sysvshm_check_shmget = stub_sysvshm_check_shmget,
1740 	.mpo_sysvshm_cleanup = stub_sysvshm_cleanup,
1741 	.mpo_sysvshm_create = stub_sysvshm_create,
1742 	.mpo_sysvshm_destroy_label = stub_destroy_label,
1743 	.mpo_sysvshm_init_label = stub_init_label,
1744 
1745 	.mpo_system_check_acct = stub_system_check_acct,
1746 	.mpo_system_check_audit = stub_system_check_audit,
1747 	.mpo_system_check_auditctl = stub_system_check_auditctl,
1748 	.mpo_system_check_auditon = stub_system_check_auditon,
1749 	.mpo_system_check_reboot = stub_system_check_reboot,
1750 	.mpo_system_check_swapoff = stub_system_check_swapoff,
1751 	.mpo_system_check_swapon = stub_system_check_swapon,
1752 	.mpo_system_check_sysctl = stub_system_check_sysctl,
1753 
1754 	.mpo_thread_userret = stub_thread_userret,
1755 
1756 	.mpo_vnode_associate_extattr = stub_vnode_associate_extattr,
1757 	.mpo_vnode_associate_singlelabel = stub_vnode_associate_singlelabel,
1758 	.mpo_vnode_check_access = stub_vnode_check_access,
1759 	.mpo_vnode_check_chdir = stub_vnode_check_chdir,
1760 	.mpo_vnode_check_chroot = stub_vnode_check_chroot,
1761 	.mpo_vnode_check_create = stub_vnode_check_create,
1762 	.mpo_vnode_check_deleteacl = stub_vnode_check_deleteacl,
1763 	.mpo_vnode_check_deleteextattr = stub_vnode_check_deleteextattr,
1764 	.mpo_vnode_check_exec = stub_vnode_check_exec,
1765 	.mpo_vnode_check_getacl = stub_vnode_check_getacl,
1766 	.mpo_vnode_check_getextattr = stub_vnode_check_getextattr,
1767 	.mpo_vnode_check_link = stub_vnode_check_link,
1768 	.mpo_vnode_check_listextattr = stub_vnode_check_listextattr,
1769 	.mpo_vnode_check_lookup = stub_vnode_check_lookup,
1770 	.mpo_vnode_check_mmap = stub_vnode_check_mmap,
1771 	.mpo_vnode_check_mmap_downgrade = stub_vnode_check_mmap_downgrade,
1772 	.mpo_vnode_check_mprotect = stub_vnode_check_mprotect,
1773 	.mpo_vnode_check_open = stub_vnode_check_open,
1774 	.mpo_vnode_check_poll = stub_vnode_check_poll,
1775 	.mpo_vnode_check_read = stub_vnode_check_read,
1776 	.mpo_vnode_check_readdir = stub_vnode_check_readdir,
1777 	.mpo_vnode_check_readlink = stub_vnode_check_readlink,
1778 	.mpo_vnode_check_relabel = stub_vnode_check_relabel,
1779 	.mpo_vnode_check_rename_from = stub_vnode_check_rename_from,
1780 	.mpo_vnode_check_rename_to = stub_vnode_check_rename_to,
1781 	.mpo_vnode_check_revoke = stub_vnode_check_revoke,
1782 	.mpo_vnode_check_setacl = stub_vnode_check_setacl,
1783 	.mpo_vnode_check_setextattr = stub_vnode_check_setextattr,
1784 	.mpo_vnode_check_setflags = stub_vnode_check_setflags,
1785 	.mpo_vnode_check_setmode = stub_vnode_check_setmode,
1786 	.mpo_vnode_check_setowner = stub_vnode_check_setowner,
1787 	.mpo_vnode_check_setutimes = stub_vnode_check_setutimes,
1788 	.mpo_vnode_check_stat = stub_vnode_check_stat,
1789 	.mpo_vnode_check_unlink = stub_vnode_check_unlink,
1790 	.mpo_vnode_check_write = stub_vnode_check_write,
1791 	.mpo_vnode_copy_label = stub_copy_label,
1792 	.mpo_vnode_create_extattr = stub_vnode_create_extattr,
1793 	.mpo_vnode_destroy_label = stub_destroy_label,
1794 	.mpo_vnode_execve_transition = stub_vnode_execve_transition,
1795 	.mpo_vnode_execve_will_transition = stub_vnode_execve_will_transition,
1796 	.mpo_vnode_externalize_label = stub_externalize_label,
1797 	.mpo_vnode_init_label = stub_init_label,
1798 	.mpo_vnode_internalize_label = stub_internalize_label,
1799 	.mpo_vnode_relabel = stub_vnode_relabel,
1800 	.mpo_vnode_setlabel_extattr = stub_vnode_setlabel_extattr,
1801 };
1802 
1803 MAC_POLICY_SET(&stub_ops, mac_stub, "TrustedBSD MAC/Stub",
1804     MPC_LOADTIME_FLAG_UNLOADOK, NULL);
1805