bsd/kern/kern_authorization.c

398 kauth_authorize_action(kauth_scope_t scope, kauth_cred_t credential, kauth_action_t action,
405 		result = scope->ks_callback(credential, scope->ks_idata, action, arg0, arg1, arg2, arg3);
423 					credential, scope->ks_listeners[i].kll_idata,
440 kauth_authorize_allow(__unused kauth_cred_t credential, __unused void *idata, __unused kauth_action_t action,
471 kauth_authorize_process(kauth_cred_t credential, kauth_action_t action, struct proc *process, uintptr_t arg1, uintptr_t arg2, uintptr_t arg3)
473 	return(kauth_authorize_action(kauth_scope_process, credential, action, (uintptr_t)process, arg1, arg2, arg3));
477 kauth_authorize_process_callback(kauth_cred_t credential, __unused void *idata, kauth_action_t action,
483 		/* XXX credential wrong here */
487 		if (cansignal(current_proc(), credential, (struct proc *)arg0, (int)arg1, 0))
495 		if (cantrace(current_proc(), credential, (proc_t)arg0, (int *)arg1))
540 kauth_authorize_fileop(kauth_cred_t credential, kauth_action_t action, uintptr_t arg0, uintptr_t arg1)
567 	kauth_authorize_action(kauth_scope_fileop, credential, action, arg0, arg1, arg2, 0);
581 kauth_authorize_generic(kauth_cred_t credential, kauth_action_t action)
583 	if (credential == NULL)
584 		panic("auth against NULL credential");
586 	return(kauth_authorize_action(kauth_scope_generic, credential, action, 0, 0, 0, 0));
591 kauth_authorize_generic_callback(kauth_cred_t credential, __unused void *idata, kauth_action_t action,
597 		return((kauth_cred_getuid(credential) == 0) ?
609  * Determines whether the credential has the requested rights for an object secured by the supplied
637 		KAUTH_DEBUG("    ACL - can't get credential GUID (%d)", error);
687 		 * Verify whether this entry applies to the credential.