Deleted Added
full compact
mac_policy.h (106217) mac_policy.h (106308)
1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by NAI Labs,

--- 20 unchanged lines hidden (view full) ---

29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 * SUCH DAMAGE.
36 *
1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by NAI Labs,

--- 20 unchanged lines hidden (view full) ---

29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 * SUCH DAMAGE.
36 *
37 * $FreeBSD: head/sys/security/mac/mac_policy.h 106217 2002-10-30 18:48:51Z rwatson $
37 * $FreeBSD: head/sys/security/mac/mac_policy.h 106308 2002-11-01 20:46:53Z rwatson $
38 */
39/*
40 * Kernel interface for MAC policy modules.
41 */
42#ifndef _SYS_MAC_POLICY_H
43#define _SYS_MAC_POLICY_H
44
45/*-

--- 218 unchanged lines hidden (view full) ---

264 struct label *newlabel);
265 int (*mpo_check_cred_visible)(struct ucred *u1, struct ucred *u2);
266 int (*mpo_check_ifnet_relabel)(struct ucred *cred,
267 struct ifnet *ifnet, struct label *ifnetlabel,
268 struct label *newlabel);
269 int (*mpo_check_ifnet_transmit)(struct ifnet *ifnet,
270 struct label *ifnetlabel, struct mbuf *m,
271 struct label *mbuflabel);
38 */
39/*
40 * Kernel interface for MAC policy modules.
41 */
42#ifndef _SYS_MAC_POLICY_H
43#define _SYS_MAC_POLICY_H
44
45/*-

--- 218 unchanged lines hidden (view full) ---

264 struct label *newlabel);
265 int (*mpo_check_cred_visible)(struct ucred *u1, struct ucred *u2);
266 int (*mpo_check_ifnet_relabel)(struct ucred *cred,
267 struct ifnet *ifnet, struct label *ifnetlabel,
268 struct label *newlabel);
269 int (*mpo_check_ifnet_transmit)(struct ifnet *ifnet,
270 struct label *ifnetlabel, struct mbuf *m,
271 struct label *mbuflabel);
272 int (*mpo_check_kenv_dump)(struct ucred *cred);
273 int (*mpo_check_kenv_get)(struct ucred *cred, char *name);
274 int (*mpo_check_kenv_set)(struct ucred *cred, char *name,
275 char *value);
276 int (*mpo_check_kenv_unset)(struct ucred *cred, char *name);
272 int (*mpo_check_mount_stat)(struct ucred *cred, struct mount *mp,
273 struct label *mntlabel);
274 int (*mpo_check_pipe_ioctl)(struct ucred *cred, struct pipe *pipe,
275 struct label *pipelabel, unsigned long cmd, void *data);
276 int (*mpo_check_pipe_poll)(struct ucred *cred, struct pipe *pipe,
277 struct label *pipelabel);
278 int (*mpo_check_pipe_read)(struct ucred *cred, struct pipe *pipe,
279 struct label *pipelabel);

--- 161 unchanged lines hidden ---
277 int (*mpo_check_mount_stat)(struct ucred *cred, struct mount *mp,
278 struct label *mntlabel);
279 int (*mpo_check_pipe_ioctl)(struct ucred *cred, struct pipe *pipe,
280 struct label *pipelabel, unsigned long cmd, void *data);
281 int (*mpo_check_pipe_poll)(struct ucred *cred, struct pipe *pipe,
282 struct label *pipelabel);
283 int (*mpo_check_pipe_read)(struct ucred *cred, struct pipe *pipe,
284 struct label *pipelabel);

--- 161 unchanged lines hidden ---