xnu/security/mac_base.c

69  * found in src/sys/mac/.  Sample policies may be found in src/sys/mac*.
101 #include <security/mac.h>
124 SYSCTL_NODE(_security, OID_AUTO, mac, CTLFLAG_RW|CTLFLAG_LOCKED, 0,
1074 mac_check_structmac_consistent(struct user_mac *mac)
1077 	if (mac->m_buflen > MAC_MAX_LABEL_BUF_LEN || mac->m_buflen == 0)
1304 	struct user_mac mac;
1314 		mac.m_buflen = mac64.m_buflen;
1315 		mac.m_string = mac64.m_string;
1319 		mac.m_buflen = mac32.m_buflen;
1320 		mac.m_string = mac32.m_string;
1325 	error = mac_check_structmac_consistent(&mac);
1335 	MALLOC(elements, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1336 	error = copyinstr(mac.m_string, elements, mac.m_buflen, &ulen);
1344 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK | M_ZERO);
1346 	    buffer, mac.m_buflen, M_WAITOK);
1348 		error = copyout(buffer, mac.m_string, strlen(buffer)+1);
1360 	struct user_mac mac;
1368 		mac.m_buflen = mac64.m_buflen;
1369 		mac.m_string = mac64.m_string;
1373 		mac.m_buflen = mac32.m_buflen;
1374 		mac.m_string = mac32.m_string;
1379 	error = mac_check_structmac_consistent(&mac);
1383 	MALLOC(elements, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1384 	error = copyinstr(mac.m_string, elements, mac.m_buflen, &ulen);
1393 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK | M_ZERO);
1395 	    elements, buffer, mac.m_buflen, M_WAITOK);
1397 		error = copyout(buffer, mac.m_string, strlen(buffer)+1);
1410 	struct user_mac mac;
1418 		mac.m_buflen = mac64.m_buflen;
1419 		mac.m_string = mac64.m_string;
1423 		mac.m_buflen = mac32.m_buflen;
1424 		mac.m_string = mac32.m_string;
1429 	error = mac_check_structmac_consistent(&mac);
1433 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1434 	error = copyinstr(mac.m_string, buffer, mac.m_buflen, &ulen);
1494 	struct user_mac mac;
1503 		mac.m_buflen = mac64.m_buflen;
1504 		mac.m_string = mac64.m_string;
1508 		mac.m_buflen = mac32.m_buflen;
1509 		mac.m_string = mac32.m_string;
1515 	error = mac_check_structmac_consistent(&mac);
1523 	MALLOC(elements, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1524 	error = copyinstr(mac.m_string, elements, mac.m_buflen, &ulen);
1531 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1533 					   buffer, mac.m_buflen);
1535 		error = copyout(buffer, mac.m_string, strlen(buffer)+1);
1563 	struct user_mac mac;
1570 		mac.m_buflen = mac64.m_buflen;
1571 		mac.m_string = mac64.m_string;
1575 		mac.m_buflen = mac32.m_buflen;
1576 		mac.m_string = mac32.m_string;
1582 	error = mac_check_structmac_consistent(&mac);
1586 	MALLOC(elements, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1587 	error = copyinstr(mac.m_string, elements, mac.m_buflen, &ulen);
1593 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1603 					   elements, buffer, mac.m_buflen);
1606 		error = copyout(buffer, mac.m_string, strlen(buffer)+1);
1617 	struct user_mac mac;
1626 		mac.m_buflen = mac64.m_buflen;
1627 		mac.m_string = mac64.m_string;
1631 		mac.m_buflen = mac32.m_buflen;
1632 		mac.m_string = mac32.m_string;
1637 	error = mac_check_structmac_consistent(&mac);
1641 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1642 	error = copyinstr(mac.m_string, buffer, mac.m_buflen, &ulen);
1703 	struct user_mac mac;
1718 		mac.m_buflen = mac64.m_buflen;
1719 		mac.m_string = mac64.m_string;
1723 		mac.m_buflen = mac32.m_buflen;
1724 		mac.m_string = mac32.m_string;
1730 	error = mac_check_structmac_consistent(&mac);
1734 	MALLOC(elements, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1735 	error = copyinstr(mac.m_string, elements, mac.m_buflen, &ulen);
1742 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1751 	error = mac_file_check_get(my_cred, fp->f_fglob, elements, mac.m_buflen);
1773 						mac.m_buflen, M_WAITOK);
1785 			error = mac_socket_label_externalize(intlabel, elements, buffer, mac.m_buflen);
1801 		error = copyout(buffer, mac.m_string, strlen(buffer)+1);
1816 	struct user_mac mac;
1823 		mac.m_buflen = mac64.m_buflen;
1824 		mac.m_string = mac64.m_string;
1828 		mac.m_buflen = mac32.m_buflen;
1829 		mac.m_string = mac32.m_string;
1835 	error = mac_check_structmac_consistent(&mac);
1839 	MALLOC(elements, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1840 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK | M_ZERO);
1842 	error = copyinstr(mac.m_string, elements, mac.m_buflen, &ulen);
1868 				    	    mac.m_buflen, M_WAITOK);
1871 		error = copyout(buffer, mac.m_string, strlen(buffer) + 1);
1902 	struct user_mac mac;
1918 		mac.m_buflen = mac64.m_buflen;
1919 		mac.m_string = mac64.m_string;
1923 		mac.m_buflen = mac32.m_buflen;
1924 		mac.m_string = mac32.m_string;
1929 	error = mac_check_structmac_consistent(&mac);
1933 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
1934 	error = copyinstr(mac.m_string, buffer, mac.m_buflen, &ulen);
1948 	error = mac_file_check_set(vfs_context_ucred(ctx), fp->f_fglob, buffer, mac.m_buflen);
2018 	struct user_mac mac;
2029 		mac.m_buflen = mac64.m_buflen;
2030 		mac.m_string = mac64.m_string;
2034 		mac.m_buflen = mac32.m_buflen;
2035 		mac.m_string = mac32.m_string;
2040 	error = mac_check_structmac_consistent(&mac);
2046 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
2047 	error = copyinstr(mac.m_string, buffer, mac.m_buflen, &ulen);
2166 	struct user_mac mac;
2173 		mac.m_buflen = mac64.m_buflen;
2174 		mac.m_string = mac64.m_string;
2178 		mac.m_buflen = mac32.m_buflen;
2179 		mac.m_string = mac32.m_string;
2184 	error = mac_check_structmac_consistent(&mac);
2188 	MALLOC(elements, char *, mac.m_buflen, M_MACTEMP, M_WAITOK);
2189 	error = copyinstr(mac.m_string, elements, mac.m_buflen, &ulen);
2197 	MALLOC(buffer, char *, mac.m_buflen, M_MACTEMP, M_WAITOK | M_ZERO);
2199 	    mac.m_buflen);
2203 		error = copyout(buffer, mac.m_string, strlen(buffer) + 1);