Deleted Added
full compact
mac_framework.h (106308) mac_framework.h (106369)
1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by NAI Labs,

--- 20 unchanged lines hidden (view full) ---

29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 * SUCH DAMAGE.
36 *
1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by NAI Labs,

--- 20 unchanged lines hidden (view full) ---

29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 * SUCH DAMAGE.
36 *
37 * $FreeBSD: head/sys/security/mac/mac_framework.h 106308 2002-11-01 20:46:53Z rwatson $
37 * $FreeBSD: head/sys/security/mac/mac_framework.h 106369 2002-11-03 02:39:42Z rwatson $
38 */
39/*
40 * Userland/kernel interface for Mandatory Access Control.
41 *
42 * The POSIX.1e implementation page may be reached at:
43 * http://www.trustedbsd.org/
44 */
45#ifndef _SYS_MAC_H

--- 204 unchanged lines hidden (view full) ---

250int mac_check_socket_connect(struct ucred *cred, struct socket *so,
251 struct sockaddr *sockaddr);
252int mac_check_socket_deliver(struct socket *so, struct mbuf *m);
253int mac_check_socket_listen(struct ucred *cred, struct socket *so);
254int mac_check_socket_receive(struct ucred *cred, struct socket *so);
255int mac_check_socket_send(struct ucred *cred, struct socket *so);
256int mac_check_socket_visible(struct ucred *cred, struct socket *so);
257int mac_check_system_reboot(struct ucred *cred, int howto);
38 */
39/*
40 * Userland/kernel interface for Mandatory Access Control.
41 *
42 * The POSIX.1e implementation page may be reached at:
43 * http://www.trustedbsd.org/
44 */
45#ifndef _SYS_MAC_H

--- 204 unchanged lines hidden (view full) ---

250int mac_check_socket_connect(struct ucred *cred, struct socket *so,
251 struct sockaddr *sockaddr);
252int mac_check_socket_deliver(struct socket *so, struct mbuf *m);
253int mac_check_socket_listen(struct ucred *cred, struct socket *so);
254int mac_check_socket_receive(struct ucred *cred, struct socket *so);
255int mac_check_socket_send(struct ucred *cred, struct socket *so);
256int mac_check_socket_visible(struct ucred *cred, struct socket *so);
257int mac_check_system_reboot(struct ucred *cred, int howto);
258int mac_check_system_settime(struct ucred *cred);
258int mac_check_system_swapon(struct ucred *cred, struct vnode *vp);
259int mac_check_system_sysctl(struct ucred *cred, int *name,
260 u_int namelen, void *old, size_t *oldlenp, int inkernel,
261 void *new, size_t newlen);
262int mac_check_vnode_access(struct ucred *cred, struct vnode *vp,
263 int acc_mode);
264int mac_check_vnode_chdir(struct ucred *cred, struct vnode *dvp);
265int mac_check_vnode_chroot(struct ucred *cred, struct vnode *dvp);

--- 70 unchanged lines hidden ---
259int mac_check_system_swapon(struct ucred *cred, struct vnode *vp);
260int mac_check_system_sysctl(struct ucred *cred, int *name,
261 u_int namelen, void *old, size_t *oldlenp, int inkernel,
262 void *new, size_t newlen);
263int mac_check_vnode_access(struct ucred *cred, struct vnode *vp,
264 int acc_mode);
265int mac_check_vnode_chdir(struct ucred *cred, struct vnode *dvp);
266int mac_check_vnode_chroot(struct ucred *cred, struct vnode *dvp);

--- 70 unchanged lines hidden ---