Deleted Added
full compact
mac_framework.h (126097) mac_framework.h (126121)
1/*-
2 * Copyright (c) 1999-2002 Robert N. M. Watson
3 * Copyright (c) 2001-2003 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by Network

--- 17 unchanged lines hidden (view full) ---

26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 * SUCH DAMAGE.
33 *
1/*-
2 * Copyright (c) 1999-2002 Robert N. M. Watson
3 * Copyright (c) 2001-2003 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by Network

--- 17 unchanged lines hidden (view full) ---

26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 * SUCH DAMAGE.
33 *
34 * $FreeBSD: head/sys/security/mac/mac_framework.h 126097 2004-02-22 00:33:12Z rwatson $
34 * $FreeBSD: head/sys/security/mac/mac_framework.h 126121 2004-02-22 12:31:44Z pjd $
35 */
36/*
37 * Userland/kernel interface for Mandatory Access Control.
38 *
39 * The POSIX.1e implementation page may be reached at:
40 * http://www.trustedbsd.org/
41 */
42#ifndef _SYS_MAC_H

--- 72 unchanged lines hidden (view full) ---

115struct inpcb;
116struct ipq;
117struct m_tag;
118struct mbuf;
119struct mount;
120struct proc;
121struct sockaddr;
122struct socket;
35 */
36/*
37 * Userland/kernel interface for Mandatory Access Control.
38 *
39 * The POSIX.1e implementation page may be reached at:
40 * http://www.trustedbsd.org/
41 */
42#ifndef _SYS_MAC_H

--- 72 unchanged lines hidden (view full) ---

115struct inpcb;
116struct ipq;
117struct m_tag;
118struct mbuf;
119struct mount;
120struct proc;
121struct sockaddr;
122struct socket;
123struct sysctl_oid;
124struct sysctl_req;
123struct pipepair;
124struct thread;
125struct timespec;
126struct ucred;
127struct uio;
128struct vattr;
129struct vnode;
130

--- 145 unchanged lines hidden (view full) ---

276int mac_check_socket_visible(struct ucred *cred, struct socket *so);
277int mac_check_sysarch_ioperm(struct ucred *cred);
278int mac_check_system_acct(struct ucred *cred, struct vnode *vp);
279int mac_check_system_nfsd(struct ucred *cred);
280int mac_check_system_reboot(struct ucred *cred, int howto);
281int mac_check_system_settime(struct ucred *cred);
282int mac_check_system_swapon(struct ucred *cred, struct vnode *vp);
283int mac_check_system_swapoff(struct ucred *cred, struct vnode *vp);
125struct pipepair;
126struct thread;
127struct timespec;
128struct ucred;
129struct uio;
130struct vattr;
131struct vnode;
132

--- 145 unchanged lines hidden (view full) ---

278int mac_check_socket_visible(struct ucred *cred, struct socket *so);
279int mac_check_sysarch_ioperm(struct ucred *cred);
280int mac_check_system_acct(struct ucred *cred, struct vnode *vp);
281int mac_check_system_nfsd(struct ucred *cred);
282int mac_check_system_reboot(struct ucred *cred, int howto);
283int mac_check_system_settime(struct ucred *cred);
284int mac_check_system_swapon(struct ucred *cred, struct vnode *vp);
285int mac_check_system_swapoff(struct ucred *cred, struct vnode *vp);
284int mac_check_system_sysctl(struct ucred *cred, int *name,
285 u_int namelen, void *old, size_t *oldlenp, int inkernel,
286 void *new, size_t newlen);
286int mac_check_system_sysctl(struct ucred *cred, struct sysctl_oid *oidp,
287 void *arg1, int arg2, struct sysctl_req *req);
287int mac_check_vnode_access(struct ucred *cred, struct vnode *vp,
288 int acc_mode);
289int mac_check_vnode_chdir(struct ucred *cred, struct vnode *dvp);
290int mac_check_vnode_chroot(struct ucred *cred, struct vnode *dvp);
291int mac_check_vnode_create(struct ucred *cred, struct vnode *dvp,
292 struct componentname *cnp, struct vattr *vap);
293int mac_check_vnode_delete(struct ucred *cred, struct vnode *dvp,
294 struct vnode *vp, struct componentname *cnp);

--- 72 unchanged lines hidden ---
288int mac_check_vnode_access(struct ucred *cred, struct vnode *vp,
289 int acc_mode);
290int mac_check_vnode_chdir(struct ucred *cred, struct vnode *dvp);
291int mac_check_vnode_chroot(struct ucred *cred, struct vnode *dvp);
292int mac_check_vnode_create(struct ucred *cred, struct vnode *dvp,
293 struct componentname *cnp, struct vattr *vap);
294int mac_check_vnode_delete(struct ucred *cred, struct vnode *dvp,
295 struct vnode *vp, struct componentname *cnp);

--- 72 unchanged lines hidden ---