Deleted Added
full compact
mac_policy.h (172930) mac_policy.h (172953)
1/*-
2 * Copyright (c) 1999-2002 Robert N. M. Watson
3 * Copyright (c) 2001-2005 Networks Associates Technology, Inc.
4 * Copyright (c) 2005-2006 SPARTA, Inc.
5 * All rights reserved.
6 *
7 * This software was developed by Robert Watson for the TrustedBSD Project.
8 *

--- 21 unchanged lines hidden (view full) ---

30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * SUCH DAMAGE.
37 *
1/*-
2 * Copyright (c) 1999-2002 Robert N. M. Watson
3 * Copyright (c) 2001-2005 Networks Associates Technology, Inc.
4 * Copyright (c) 2005-2006 SPARTA, Inc.
5 * All rights reserved.
6 *
7 * This software was developed by Robert Watson for the TrustedBSD Project.
8 *

--- 21 unchanged lines hidden (view full) ---

30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * SUCH DAMAGE.
37 *
38 * $FreeBSD: head/sys/security/mac/mac_policy.h 172930 2007-10-24 19:04:04Z rwatson $
38 * $FreeBSD: head/sys/security/mac/mac_policy.h 172953 2007-10-25 07:49:47Z rwatson $
39 */
40/*
41 * Kernel interface for MAC policy modules.
42 */
43#ifndef _SYS_SECURITY_MAC_MAC_POLICY_H_
44#define _SYS_SECURITY_MAC_MAC_POLICY_H_
45
46#ifndef _KERNEL

--- 287 unchanged lines hidden (view full) ---

334 struct inpcb *inp);
335typedef void (*mpo_create_mbuf_from_syncache_t)(struct label *sc_label,
336 struct mbuf *m, struct label *mlabel);
337/*
338 * Labeling event operations: processes.
339 */
340typedef void (*mpo_vnode_execve_transition_t)(struct ucred *old,
341 struct ucred *new, struct vnode *vp,
39 */
40/*
41 * Kernel interface for MAC policy modules.
42 */
43#ifndef _SYS_SECURITY_MAC_MAC_POLICY_H_
44#define _SYS_SECURITY_MAC_MAC_POLICY_H_
45
46#ifndef _KERNEL

--- 287 unchanged lines hidden (view full) ---

334 struct inpcb *inp);
335typedef void (*mpo_create_mbuf_from_syncache_t)(struct label *sc_label,
336 struct mbuf *m, struct label *mlabel);
337/*
338 * Labeling event operations: processes.
339 */
340typedef void (*mpo_vnode_execve_transition_t)(struct ucred *old,
341 struct ucred *new, struct vnode *vp,
342 struct label *vplabel, struct label *interpvnodelabel,
342 struct label *vplabel, struct label *interpvplabel,
343 struct image_params *imgp, struct label *execlabel);
344typedef int (*mpo_vnode_execve_will_transition_t)(struct ucred *old,
345 struct vnode *vp, struct label *vplabel,
343 struct image_params *imgp, struct label *execlabel);
344typedef int (*mpo_vnode_execve_will_transition_t)(struct ucred *old,
345 struct vnode *vp, struct label *vplabel,
346 struct label *interpvnodelabel,
347 struct image_params *imgp, struct label *execlabel);
346 struct label *interpvplabel, struct image_params *imgp,
347 struct label *execlabel);
348typedef void (*mpo_proc_create_swapper_t)(struct ucred *cred);
349typedef void (*mpo_proc_create_init_t)(struct ucred *cred);
350typedef void (*mpo_cred_relabel_t)(struct ucred *cred,
351 struct label *newlabel);
352typedef void (*mpo_thread_userret_t)(struct thread *thread);
353
354/*
355 * Access control checks.

--- 626 unchanged lines hidden ---
348typedef void (*mpo_proc_create_swapper_t)(struct ucred *cred);
349typedef void (*mpo_proc_create_init_t)(struct ucred *cred);
350typedef void (*mpo_cred_relabel_t)(struct ucred *cred,
351 struct label *newlabel);
352typedef void (*mpo_thread_userret_t)(struct thread *thread);
353
354/*
355 * Access control checks.

--- 626 unchanged lines hidden ---