Deleted Added
full compact
mac_policy.h (173108) mac_policy.h (175164)
1/*-
2 * Copyright (c) 1999-2002, 2007 Robert N. M. Watson
3 * Copyright (c) 2001-2005 Networks Associates Technology, Inc.
4 * Copyright (c) 2005-2006 SPARTA, Inc.
5 * All rights reserved.
6 *
7 * This software was developed by Robert Watson for the TrustedBSD Project.
8 *

--- 21 unchanged lines hidden (view full) ---

30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * SUCH DAMAGE.
37 *
1/*-
2 * Copyright (c) 1999-2002, 2007 Robert N. M. Watson
3 * Copyright (c) 2001-2005 Networks Associates Technology, Inc.
4 * Copyright (c) 2005-2006 SPARTA, Inc.
5 * All rights reserved.
6 *
7 * This software was developed by Robert Watson for the TrustedBSD Project.
8 *

--- 21 unchanged lines hidden (view full) ---

30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * SUCH DAMAGE.
37 *
38 * $FreeBSD: head/sys/security/mac/mac_policy.h 173108 2007-10-28 17:55:57Z rwatson $
38 * $FreeBSD: head/sys/security/mac/mac_policy.h 175164 2008-01-08 21:58:16Z jhb $
39 */
40/*
41 * Kernel interface for MAC policy modules.
42 */
43#ifndef _SYS_SECURITY_MAC_MAC_POLICY_H_
44#define _SYS_SECURITY_MAC_MAC_POLICY_H_
45
46#ifndef _KERNEL

--- 31 unchanged lines hidden (view full) ---

78struct mbuf;
79struct mount;
80struct msg;
81struct msqid_kernel;
82struct pipepair;
83struct proc;
84struct sbuf;
85struct semid_kernel;
39 */
40/*
41 * Kernel interface for MAC policy modules.
42 */
43#ifndef _SYS_SECURITY_MAC_MAC_POLICY_H_
44#define _SYS_SECURITY_MAC_MAC_POLICY_H_
45
46#ifndef _KERNEL

--- 31 unchanged lines hidden (view full) ---

78struct mbuf;
79struct mount;
80struct msg;
81struct msqid_kernel;
82struct pipepair;
83struct proc;
84struct sbuf;
85struct semid_kernel;
86struct shmfd;
86struct shmid_kernel;
87struct sockaddr;
88struct socket;
89struct sysctl_oid;
90struct sysctl_req;
91struct thread;
92struct ucred;
93struct uio;

--- 206 unchanged lines hidden (view full) ---

300 struct ksem *ks, struct label *kslabel);
301typedef int (*mpo_posixsem_check_wait_t)(struct ucred *cred,
302 struct ksem *ks, struct label *kslabel);
303typedef void (*mpo_posixsem_create_t)(struct ucred *cred,
304 struct ksem *ks, struct label *kslabel);
305typedef void (*mpo_posixsem_destroy_label_t)(struct label *label);
306typedef void (*mpo_posixsem_init_label_t)(struct label *label);
307
87struct shmid_kernel;
88struct sockaddr;
89struct socket;
90struct sysctl_oid;
91struct sysctl_req;
92struct thread;
93struct ucred;
94struct uio;

--- 206 unchanged lines hidden (view full) ---

301 struct ksem *ks, struct label *kslabel);
302typedef int (*mpo_posixsem_check_wait_t)(struct ucred *cred,
303 struct ksem *ks, struct label *kslabel);
304typedef void (*mpo_posixsem_create_t)(struct ucred *cred,
305 struct ksem *ks, struct label *kslabel);
306typedef void (*mpo_posixsem_destroy_label_t)(struct label *label);
307typedef void (*mpo_posixsem_init_label_t)(struct label *label);
308
309typedef int (*mpo_posixshm_check_mmap_t)(struct ucred *cred,
310 struct shmfd *shmfd, struct label *shmlabel, int prot,
311 int flags);
312typedef int (*mpo_posixshm_check_open_t)(struct ucred *cred,
313 struct shmfd *shmfd, struct label *shmlabel);
314typedef int (*mpo_posixshm_check_stat_t)(struct ucred *active_cred,
315 struct ucred *file_cred, struct shmfd *shmfd,
316 struct label *shmlabel);
317typedef int (*mpo_posixshm_check_truncate_t)(struct ucred *active_cred,
318 struct ucred *file_cred, struct shmfd *shmfd,
319 struct label *shmlabel);
320typedef int (*mpo_posixshm_check_unlink_t)(struct ucred *cred,
321 struct shmfd *shmfd, struct label *shmlabel);
322typedef void (*mpo_posixshm_create_t)(struct ucred *cred,
323 struct shmfd *shmfd, struct label *shmlabel);
324typedef void (*mpo_posixshm_destroy_label_t)(struct label *label);
325typedef void (*mpo_posixshm_init_label_t)(struct label *label);
326
308typedef int (*mpo_priv_check_t)(struct ucred *cred, int priv);
309typedef int (*mpo_priv_grant_t)(struct ucred *cred, int priv);
310
311typedef void (*mpo_proc_associate_nfsd_t)(struct ucred *cred);
312typedef int (*mpo_proc_check_debug_t)(struct ucred *cred,
313 struct proc *p);
314typedef int (*mpo_proc_check_sched_t)(struct ucred *cred,
315 struct proc *p);

--- 412 unchanged lines hidden (view full) ---

728 mpo_posixsem_check_open_t mpo_posixsem_check_open;
729 mpo_posixsem_check_post_t mpo_posixsem_check_post;
730 mpo_posixsem_check_unlink_t mpo_posixsem_check_unlink;
731 mpo_posixsem_check_wait_t mpo_posixsem_check_wait;
732 mpo_posixsem_create_t mpo_posixsem_create;
733 mpo_posixsem_destroy_label_t mpo_posixsem_destroy_label;
734 mpo_posixsem_init_label_t mpo_posixsem_init_label;
735
327typedef int (*mpo_priv_check_t)(struct ucred *cred, int priv);
328typedef int (*mpo_priv_grant_t)(struct ucred *cred, int priv);
329
330typedef void (*mpo_proc_associate_nfsd_t)(struct ucred *cred);
331typedef int (*mpo_proc_check_debug_t)(struct ucred *cred,
332 struct proc *p);
333typedef int (*mpo_proc_check_sched_t)(struct ucred *cred,
334 struct proc *p);

--- 412 unchanged lines hidden (view full) ---

747 mpo_posixsem_check_open_t mpo_posixsem_check_open;
748 mpo_posixsem_check_post_t mpo_posixsem_check_post;
749 mpo_posixsem_check_unlink_t mpo_posixsem_check_unlink;
750 mpo_posixsem_check_wait_t mpo_posixsem_check_wait;
751 mpo_posixsem_create_t mpo_posixsem_create;
752 mpo_posixsem_destroy_label_t mpo_posixsem_destroy_label;
753 mpo_posixsem_init_label_t mpo_posixsem_init_label;
754
755 mpo_posixshm_check_mmap_t mpo_posixshm_check_mmap;
756 mpo_posixshm_check_open_t mpo_posixshm_check_open;
757 mpo_posixshm_check_stat_t mpo_posixshm_check_stat;
758 mpo_posixshm_check_truncate_t mpo_posixshm_check_truncate;
759 mpo_posixshm_check_unlink_t mpo_posixshm_check_unlink;
760 mpo_posixshm_create_t mpo_posixshm_create;
761 mpo_posixshm_destroy_label_t mpo_posixshm_destroy_label;
762 mpo_posixshm_init_label_t mpo_posixshm_init_label;
763
736 mpo_priv_check_t mpo_priv_check;
737 mpo_priv_grant_t mpo_priv_grant;
738
739 mpo_proc_associate_nfsd_t mpo_proc_associate_nfsd;
740 mpo_proc_check_debug_t mpo_proc_check_debug;
741 mpo_proc_check_sched_t mpo_proc_check_sched;
742 mpo_proc_check_setaudit_t mpo_proc_check_setaudit;
743 mpo_proc_check_setaudit_addr_t mpo_proc_check_setaudit_addr;

--- 213 unchanged lines hidden ---
764 mpo_priv_check_t mpo_priv_check;
765 mpo_priv_grant_t mpo_priv_grant;
766
767 mpo_proc_associate_nfsd_t mpo_proc_associate_nfsd;
768 mpo_proc_check_debug_t mpo_proc_check_debug;
769 mpo_proc_check_sched_t mpo_proc_check_sched;
770 mpo_proc_check_setaudit_t mpo_proc_check_setaudit;
771 mpo_proc_check_setaudit_addr_t mpo_proc_check_setaudit_addr;

--- 213 unchanged lines hidden ---