xnu/security/mac_base.c

46  *    notice, this list of conditions and the following disclaimer.
48  *    notice, this list of conditions and the following disclaimer in the
260  * mac_policy_list holds the list of policy modules.  Modules with a
266  * for the list, stored in mac_policy_busy.  The busy count is protected
267  * by mac_policy_mtx; the list may be modified only while the busy
269  * to the list from being acquired.  For almost all operations,
271  * as the list cannot be modified while the busy count is elevated.
272  * For a few special operations involving a change to the list of
278  * Policy list array allocation chunk size. Trying to set this so that we
288  * mac_label_element_list holds the master list of label namespaces for
290  * elements is added to the master list if not already present. When a
354 		printf("%s(): Label not in list!\n", __func__);
402 	/* Free list */
581  * policy to either the static or non-static label namespace list.
582  * A namespace is added to the the list only if it is not already on one of
590 	struct mac_label_element_list_t *list;
604 		list = &mac_static_label_element_list;
606 		list = &mac_label_element_list;
609 	 * Before we grab the policy list lock, allocate enough memory
637 		 * appropriate list only if not already on a list.
658 			LIST_INSERT_HEAD(list, mle, mle_list);
681  * the policy manages from the non-static list of namespaces.
705 	 * that label element from the list.  Note that we only
706 	 * have to worry about the non-static list.
724  * After the policy list has changed, walk the list to update any global
752 				aele = &(arr->list[j]);
762 						    &(dict->list[k]));
806 		/* allocate new policy list array, zero new chunk */
814 		/* copy old entries into new list */
868 	/* Find the first free handle in the list (using our hint). */
1171  * namespaces contained in a list.