bsd/hfs/hfs_cprotect.c

197  * Set up initial key/class pair on cnode. The cnode does not yet exist,
220 	/* Default to class D */
223 	/* Decide the target class.  Input argument takes priority. */
238 		/* If no valid class was supplied, then inherit from parent if possible */
241 			/* If the parent class is not valid, default back to D */
243 				/* Parent class was good. use it. */
302  * Set up an initial key/class pair for a disassociated cprotect entry.
304  * written to disk.  We use class F for this since it provides the exact
317 	/* Default to class F */
394  * Sets *class to persistent class associated with vnode,
398 cp_vnode_getclass(struct vnode *vp, int *class)
437 	/* pull the class from the live entry */
454 		*class = entry->cp_pclass;
467  * Sets persistent class for this file or directory.
469  * If the new class can't be accessed now, EPERM.
470  * Otherwise, record class and re-wrap key if the mount point is content-protected.
483 		printf("hfs: CP: cp_setclass called with invalid class %d\n", newclass);
490 			 * Directories are not allowed to set to class F, since the
544 	/* re-wrap per-file key with new class */
548 			/* we didn't have perms to set this class. leave file as-is and error out */
631 	/* Send the per-file key for re-wrap with the current class information
1180 cp_is_valid_class(int class)
1182 	return ((class >= PROTECTION_CLASS_A) &&
1183 			(class <= PROTECTION_CLASS_F));
1389  * But when the directory's class is set, we use that as the default.
1403 	/* create new cp data: key and class */
1414 	 * Attempt to wrap the new key in the class key specified by target_pclass
1417 	 * wrap this cache key in the class 'A' key while the device is locked.
1514 	/* Deny all access for class A files */
1577 				 * B is kept in memory for writing, and class F (for VM) does
1581 				 * Note that 'class F' is relevant here because if
1643 cp_wrap(int class, struct hfsmount *hfsmp, cnid_t fileid, struct cprotect **entry_ptr)
1656 	if (class == PROTECTION_CLASS_F) {
1669 	error = g_cp_wrap_func.wrapper(class,
1678 		 * v2 EA's don't support the larger class B keys
1714 cp_unwrap(int class, struct cprotect *entry)
1724 	if (class == PROTECTION_CLASS_F) {
1728 	error = g_cp_wrap_func.unwrapper(class,