1/*-
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002, 2003 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by Network
--- 17 unchanged lines hidden (view full) ---
26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 * SUCH DAMAGE.
33 *
34 * $FreeBSD: head/sys/security/mac/mac_framework.h 119198 2003-08-21 13:53:01Z rwatson $
35 */
36/*
37 * Userland/kernel interface for Mandatory Access Control.
38 *
39 * The POSIX.1e implementation page may be reached at:
40 * http://www.trustedbsd.org/
41 */
42#ifndef _SYS_MAC_H
--- 162 unchanged lines hidden (view full) ---
205void mac_create_mbuf_from_mbuf(struct mbuf *oldmbuf, struct mbuf *newmbuf);
206void mac_create_mbuf_linklayer(struct ifnet *ifnet, struct mbuf *m);
207void mac_create_mbuf_from_bpfdesc(struct bpf_d *bpf_d, struct mbuf *m);
208void mac_create_mbuf_from_ifnet(struct ifnet *ifnet, struct mbuf *m);
209void mac_create_mbuf_multicast_encap(struct mbuf *oldmbuf,
210 struct ifnet *ifnet, struct mbuf *newmbuf);
211void mac_create_mbuf_netlayer(struct mbuf *oldmbuf, struct mbuf *newmbuf);
212int mac_fragment_match(struct mbuf *fragment, struct ipq *ipq);
213void mac_update_ipq(struct mbuf *fragment, struct ipq *ipq);
214
215/*
216 * Labeling event operations: processes.
217 */
218void mac_create_cred(struct ucred *cred_parent, struct ucred *cred_child);
219int mac_execve_enter(struct image_params *imgp, struct mac *mac_p,
220 struct label *execlabel);
--- 131 unchanged lines hidden ---
2 * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson
3 * Copyright (c) 2001, 2002, 2003 Networks Associates Technology, Inc.
4 * All rights reserved.
5 *
6 * This software was developed by Robert Watson for the TrustedBSD Project.
7 *
8 * This software was developed for the FreeBSD Project in part by Network
--- 17 unchanged lines hidden (view full) ---
26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 * SUCH DAMAGE.
33 *
34 * $FreeBSD: head/sys/security/mac/mac_framework.h 119198 2003-08-21 13:53:01Z rwatson $
35 */
36/*
37 * Userland/kernel interface for Mandatory Access Control.
38 *
39 * The POSIX.1e implementation page may be reached at:
40 * http://www.trustedbsd.org/
41 */
42#ifndef _SYS_MAC_H
--- 162 unchanged lines hidden (view full) ---
205void mac_create_mbuf_from_mbuf(struct mbuf *oldmbuf, struct mbuf *newmbuf);
206void mac_create_mbuf_linklayer(struct ifnet *ifnet, struct mbuf *m);
207void mac_create_mbuf_from_bpfdesc(struct bpf_d *bpf_d, struct mbuf *m);
208void mac_create_mbuf_from_ifnet(struct ifnet *ifnet, struct mbuf *m);
209void mac_create_mbuf_multicast_encap(struct mbuf *oldmbuf,
210 struct ifnet *ifnet, struct mbuf *newmbuf);
211void mac_create_mbuf_netlayer(struct mbuf *oldmbuf, struct mbuf *newmbuf);
212int mac_fragment_match(struct mbuf *fragment, struct ipq *ipq);
213void mac_update_ipq(struct mbuf *fragment, struct ipq *ipq);
214
215/*
216 * Labeling event operations: processes.
217 */
218void mac_create_cred(struct ucred *cred_parent, struct ucred *cred_child);
219int mac_execve_enter(struct image_params *imgp, struct mac *mac_p,
220 struct label *execlabel);
--- 131 unchanged lines hidden ---