Deleted Added
sdiff udiff text old ( 104300 ) new ( 104338 )
full compact
1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001 Ilmar S. Habibulin
4 * Copyright (c) 2001, 2002 Networks Associates Technology, Inc.
5 * All rights reserved.
6 *
7 * This software was developed by Robert Watson and Ilmar Habibulin for the
8 * TrustedBSD Project.

--- 22 unchanged lines hidden (view full) ---

31 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
32 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
33 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
34 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
35 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
36 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
37 * SUCH DAMAGE.
38 *
39 * $FreeBSD: head/sys/security/mac/mac_process.c 104300 2002-10-01 15:24:35Z phk $
40 */
41/*
42 * Developed by the TrustedBSD Project.
43 *
44 * Framework for extensible kernel access control. Kernel and userland
45 * interface to the framework, policy registration and composition.
46 */
47

--- 599 unchanged lines hidden (view full) ---

647 break;
648 case MAC_CREATE_PROC1:
649 mpc->mpc_ops->mpo_create_proc1 = mpe->mpe_function;
650 break;
651 case MAC_RELABEL_CRED:
652 mpc->mpc_ops->mpo_relabel_cred =
653 mpe->mpe_function;
654 break;
655 case MAC_CHECK_BPFDESC_RECEIVE:
656 mpc->mpc_ops->mpo_check_bpfdesc_receive =
657 mpe->mpe_function;
658 break;
659 case MAC_CHECK_CRED_RELABEL:
660 mpc->mpc_ops->mpo_check_cred_relabel =
661 mpe->mpe_function;
662 break;

--- 913 unchanged lines hidden (view full) ---

1576 */
1577void
1578mac_create_proc1(struct ucred *cred)
1579{
1580
1581 MAC_PERFORM(create_proc1, cred);
1582}
1583
1584/*
1585 * When a new process is created, its label must be initialized. Generally,
1586 * this involves inheritence from the parent process, modulo possible
1587 * deltas. This function allows that processing to take place.
1588 */
1589void
1590mac_create_cred(struct ucred *parent_cred, struct ucred *child_cred)
1591{

--- 1775 unchanged lines hidden ---