bsd/kern/kern_credential.c

3882  *		kauth_cred_t without a POSIX label.  This will be the case in
4103  * Description:	Update the MAC label associated with a credential
4106  *		label				The MAC label to set
4123 kauth_cred_label_update(kauth_cred_t cred, struct label *label)
4132 	mac_cred_label_update(&temp_cred, label);
4142  * Description:	Update the MAC label associated with a credential as
4147  *		scriptl				The script MAC label
4148  *		execl				The executable MAC label
4173 	struct vnode *vp, struct label *scriptl, struct label *execl,
4194  * Description:  Update the label inside the credential associated with the process.
4197  *				label		The label to place in the process credential
4203 int kauth_proc_label_update(struct proc *p, struct label *label)
4221 		my_new_cred = kauth_cred_label_update(my_cred, label);
4258  * Description: Update the label inside the credential associated with the
4259  *		process as part of a transitioning execve.  The label will
4266  *		scriptl			The script MAC label
4267  *		execl			The executable MAC label
4280 	struct vnode *vp, struct label *scriptl, struct label *execl)
4336 kauth_cred_t	kauth_cred_setlabel(kauth_cred_t cred, struct label *label);
4338 kauth_cred_setlabel(kauth_cred_t cred, struct label *label)
4340 	return kauth_cred_label_update(cred, label);
4343 int kauth_proc_setlabel(struct proc *p, struct label *label);
4345 kauth_proc_setlabel(struct proc *p, struct label *label)
4347 	return kauth_proc_label_update(p, label);
4358 kauth_cred_label_update(__unused kauth_cred_t cred, __unused void *label)
4364 kauth_proc_label_update(__unused struct proc *p, __unused void *label)
4373 kauth_cred_t	kauth_cred_setlabel(kauth_cred_t cred, void *label);
4375 kauth_cred_setlabel(__unused kauth_cred_t cred, __unused void *label)
4380 int kauth_proc_setlabel(struct proc *p, void *label);
4382 kauth_proc_setlabel(__unused struct proc *p, __unused void *label)
4592 	struct label *temp_label;
4947 		 * don't worry about the label unless the flags in
5014  * Notes:	When actually moving the POSIX credential into a real label,
5032 								   sizeof (struct label),
5218 	void	*cr_label;			/* MACF label */
5395  *		initally labelled with a specific POSIX credential label
5398  *					label value
5404  *					attach a label to the new credential
5420  *		create a new kauth_cred_t, then label it with a POSIX label
5442  * Description:	Given a kauth_cred_t, return the POSIX credential label, if
5445  * Parameters:	cred			The credential to obtain the label from
5447  * Returns:	posix_cred_t		The POSIX credential label
5459  *		there is no POSIX label on the kauth_cred_t credential, this
5482  * Description:	Label a kauth_cred_t with a POSIX credential label
5484  * Parameters:	cred			The credential to label
5485  *		pcred			The POSIX credential t label it with
5490  *		in with the current MACF framework label methods which allow