Deleted Added
full compact
mac_policy.h (179963) mac_policy.h (180059)
1/*-
2 * Copyright (c) 1999-2002, 2007 Robert N. M. Watson
3 * Copyright (c) 2001-2005 Networks Associates Technology, Inc.
4 * Copyright (c) 2005-2006 SPARTA, Inc.
5 * All rights reserved.
6 *
7 * This software was developed by Robert Watson for the TrustedBSD Project.
8 *

--- 21 unchanged lines hidden (view full) ---

30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * SUCH DAMAGE.
37 *
1/*-
2 * Copyright (c) 1999-2002, 2007 Robert N. M. Watson
3 * Copyright (c) 2001-2005 Networks Associates Technology, Inc.
4 * Copyright (c) 2005-2006 SPARTA, Inc.
5 * All rights reserved.
6 *
7 * This software was developed by Robert Watson for the TrustedBSD Project.
8 *

--- 21 unchanged lines hidden (view full) ---

30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * SUCH DAMAGE.
37 *
38 * $FreeBSD: head/sys/security/mac/mac_policy.h 179963 2008-06-23 21:37:53Z jhb $
38 * $FreeBSD: head/sys/security/mac/mac_policy.h 180059 2008-06-27 05:39:04Z jhb $
39 */
40/*
41 * Kernel interface for MAC policy modules.
42 */
43#ifndef _SECURITY_MAC_MAC_POLICY_H_
44#define _SECURITY_MAC_MAC_POLICY_H_
45
46#ifndef _KERNEL

--- 236 unchanged lines hidden (view full) ---

283typedef int (*mpo_pipe_externalize_label_t)(struct label *label,
284 char *element_name, struct sbuf *sb, int *claimed);
285typedef void (*mpo_pipe_init_label_t)(struct label *label);
286typedef int (*mpo_pipe_internalize_label_t)(struct label *label,
287 char *element_name, char *element_data, int *claimed);
288typedef void (*mpo_pipe_relabel_t)(struct ucred *cred, struct pipepair *pp,
289 struct label *oldlabel, struct label *newlabel);
290
39 */
40/*
41 * Kernel interface for MAC policy modules.
42 */
43#ifndef _SECURITY_MAC_MAC_POLICY_H_
44#define _SECURITY_MAC_MAC_POLICY_H_
45
46#ifndef _KERNEL

--- 236 unchanged lines hidden (view full) ---

283typedef int (*mpo_pipe_externalize_label_t)(struct label *label,
284 char *element_name, struct sbuf *sb, int *claimed);
285typedef void (*mpo_pipe_init_label_t)(struct label *label);
286typedef int (*mpo_pipe_internalize_label_t)(struct label *label,
287 char *element_name, char *element_data, int *claimed);
288typedef void (*mpo_pipe_relabel_t)(struct ucred *cred, struct pipepair *pp,
289 struct label *oldlabel, struct label *newlabel);
290
291typedef int (*mpo_posixsem_check_getvalue_t)(struct ucred *cred,
292 struct ksem *ks, struct label *kslabel);
291typedef int (*mpo_posixsem_check_getvalue_t)(struct ucred *active_cred,
292 struct ucred *file_cred, struct ksem *ks,
293 struct label *kslabel);
293typedef int (*mpo_posixsem_check_open_t)(struct ucred *cred,
294 struct ksem *ks, struct label *kslabel);
294typedef int (*mpo_posixsem_check_open_t)(struct ucred *cred,
295 struct ksem *ks, struct label *kslabel);
295typedef int (*mpo_posixsem_check_post_t)(struct ucred *cred,
296 struct ksem *ks, struct label *kslabel);
296typedef int (*mpo_posixsem_check_post_t)(struct ucred *active_cred,
297 struct ucred *file_cred, struct ksem *ks,
298 struct label *kslabel);
299typedef int (*mpo_posixsem_check_stat_t)(struct ucred *active_cred,
300 struct ucred *file_cred, struct ksem *ks,
301 struct label *kslabel);
297typedef int (*mpo_posixsem_check_unlink_t)(struct ucred *cred,
298 struct ksem *ks, struct label *kslabel);
302typedef int (*mpo_posixsem_check_unlink_t)(struct ucred *cred,
303 struct ksem *ks, struct label *kslabel);
299typedef int (*mpo_posixsem_check_wait_t)(struct ucred *cred,
300 struct ksem *ks, struct label *kslabel);
304typedef int (*mpo_posixsem_check_wait_t)(struct ucred *active_cred,
305 struct ucred *file_cred, struct ksem *ks,
306 struct label *kslabel);
301typedef void (*mpo_posixsem_create_t)(struct ucred *cred,
302 struct ksem *ks, struct label *kslabel);
303typedef void (*mpo_posixsem_destroy_label_t)(struct label *label);
304typedef void (*mpo_posixsem_init_label_t)(struct label *label);
305
306typedef int (*mpo_posixshm_check_mmap_t)(struct ucred *cred,
307 struct shmfd *shmfd, struct label *shmlabel, int prot,
308 int flags);

--- 428 unchanged lines hidden (view full) ---

737 mpo_pipe_externalize_label_t mpo_pipe_externalize_label;
738 mpo_pipe_init_label_t mpo_pipe_init_label;
739 mpo_pipe_internalize_label_t mpo_pipe_internalize_label;
740 mpo_pipe_relabel_t mpo_pipe_relabel;
741
742 mpo_posixsem_check_getvalue_t mpo_posixsem_check_getvalue;
743 mpo_posixsem_check_open_t mpo_posixsem_check_open;
744 mpo_posixsem_check_post_t mpo_posixsem_check_post;
307typedef void (*mpo_posixsem_create_t)(struct ucred *cred,
308 struct ksem *ks, struct label *kslabel);
309typedef void (*mpo_posixsem_destroy_label_t)(struct label *label);
310typedef void (*mpo_posixsem_init_label_t)(struct label *label);
311
312typedef int (*mpo_posixshm_check_mmap_t)(struct ucred *cred,
313 struct shmfd *shmfd, struct label *shmlabel, int prot,
314 int flags);

--- 428 unchanged lines hidden (view full) ---

743 mpo_pipe_externalize_label_t mpo_pipe_externalize_label;
744 mpo_pipe_init_label_t mpo_pipe_init_label;
745 mpo_pipe_internalize_label_t mpo_pipe_internalize_label;
746 mpo_pipe_relabel_t mpo_pipe_relabel;
747
748 mpo_posixsem_check_getvalue_t mpo_posixsem_check_getvalue;
749 mpo_posixsem_check_open_t mpo_posixsem_check_open;
750 mpo_posixsem_check_post_t mpo_posixsem_check_post;
751 mpo_posixsem_check_stat_t mpo_posixsem_check_stat;
745 mpo_posixsem_check_unlink_t mpo_posixsem_check_unlink;
746 mpo_posixsem_check_wait_t mpo_posixsem_check_wait;
747 mpo_posixsem_create_t mpo_posixsem_create;
748 mpo_posixsem_destroy_label_t mpo_posixsem_destroy_label;
749 mpo_posixsem_init_label_t mpo_posixsem_init_label;
750
751 mpo_posixshm_check_mmap_t mpo_posixshm_check_mmap;
752 mpo_posixshm_check_open_t mpo_posixshm_check_open;

--- 228 unchanged lines hidden ---
752 mpo_posixsem_check_unlink_t mpo_posixsem_check_unlink;
753 mpo_posixsem_check_wait_t mpo_posixsem_check_wait;
754 mpo_posixsem_create_t mpo_posixsem_create;
755 mpo_posixsem_destroy_label_t mpo_posixsem_destroy_label;
756 mpo_posixsem_init_label_t mpo_posixsem_init_label;
757
758 mpo_posixshm_check_mmap_t mpo_posixshm_check_mmap;
759 mpo_posixshm_check_open_t mpo_posixshm_check_open;

--- 228 unchanged lines hidden ---