Deleted Added
full compact
mac_framework.h (122875) mac_framework.h (123173)
1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002, 2003 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by Network

--- 17 unchanged lines hidden (view full) ---

26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 * SUCH DAMAGE.
33 *
1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002, 2003 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by Network

--- 17 unchanged lines hidden (view full) ---

26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 * SUCH DAMAGE.
33 *
34 * $FreeBSD: head/sys/security/mac/mac_framework.h 122875 2003-11-18 00:39:07Z rwatson $
34 * $FreeBSD: head/sys/security/mac/mac_framework.h 123173 2003-12-06 21:48:03Z rwatson $
35 */
36/*
37 * Userland/kernel interface for Mandatory Access Control.
38 *
39 * The POSIX.1e implementation page may be reached at:
40 * http://www.trustedbsd.org/
41 */
42#ifndef _SYS_MAC_H

--- 181 unchanged lines hidden (view full) ---

224void mac_reflect_mbuf_icmp(struct mbuf *m);
225void mac_reflect_mbuf_tcp(struct mbuf *m);
226void mac_update_ipq(struct mbuf *fragment, struct ipq *ipq);
227void mac_inpcb_sosetlabel(struct socket *so, struct inpcb *inp);
228
229/*
230 * Labeling event operations: processes.
231 */
35 */
36/*
37 * Userland/kernel interface for Mandatory Access Control.
38 *
39 * The POSIX.1e implementation page may be reached at:
40 * http://www.trustedbsd.org/
41 */
42#ifndef _SYS_MAC_H

--- 181 unchanged lines hidden (view full) ---

224void mac_reflect_mbuf_icmp(struct mbuf *m);
225void mac_reflect_mbuf_tcp(struct mbuf *m);
226void mac_update_ipq(struct mbuf *fragment, struct ipq *ipq);
227void mac_inpcb_sosetlabel(struct socket *so, struct inpcb *inp);
228
229/*
230 * Labeling event operations: processes.
231 */
232void mac_create_cred(struct ucred *cred_parent, struct ucred *cred_child);
232void mac_copy_cred(struct ucred *cr1, struct ucred *cr2);
233int mac_execve_enter(struct image_params *imgp, struct mac *mac_p);
234void mac_execve_exit(struct image_params *imgp);
235void mac_execve_transition(struct ucred *old, struct ucred *new,
236 struct vnode *vp, struct label *interpvnodelabel,
237 struct image_params *imgp);
238int mac_execve_will_transition(struct ucred *old, struct vnode *vp,
239 struct label *interpvnodelabel, struct image_params *imgp);
240void mac_create_proc0(struct ucred *cred);

--- 125 unchanged lines hidden ---
233int mac_execve_enter(struct image_params *imgp, struct mac *mac_p);
234void mac_execve_exit(struct image_params *imgp);
235void mac_execve_transition(struct ucred *old, struct ucred *new,
236 struct vnode *vp, struct label *interpvnodelabel,
237 struct image_params *imgp);
238int mac_execve_will_transition(struct ucred *old, struct vnode *vp,
239 struct label *interpvnodelabel, struct image_params *imgp);
240void mac_create_proc0(struct ucred *cred);

--- 125 unchanged lines hidden ---