xnu/security/mac_base.c

159  * Flag to indicate whether or not we should allocate label storage for
164  * be able to deal with a NULL label being returned on any mbufs that
177  * Flag to indicate whether or not we should allocate label storage for
182  * be able to deal with a NULL label being returned on any vnodes that
288  * mac_label_element_list holds the master list of label namespaces for
289  * all the policies. When a policy is loaded, each of it's label namespace
298  * Journal of label operations that occur before policies are loaded.
303 mac_label_journal_add (struct label *l, int type)
320 mac_label_journal_remove (struct label *l)
334 mac_label_journal_find (struct label *l)
347 mac_label_journal (struct label *l, int op, ...)
580  * After a policy has been loaded, add the label namespaces managed by the
581  * policy to either the static or non-static label namespace list.
636 		 * Check both label element lists and add to the
670 	/* Free up any unused label elements and listeners */
680  * After a policy has been unloaded, remove the label namespaces that the
703 	 * Unregister policy as being interested in any label
705 	 * that label element from the list.  Note that we only
789 		panic("policy's managed label namespaces exceeds maximum\n");
1035 mac_label_init(struct label *label)
1038 	bzero(label, sizeof(*label));
1039 	label->l_flags = MAC_FLAG_INITIALIZED;
1043 mac_label_destroy(struct label *label)
1046 	KASSERT(label->l_flags & MAC_FLAG_INITIALIZED,
1047 	    ("destroying uninitialized label"));
1049 	bzero(label, sizeof(*label));
1050 	/* implicit: label->l_flags &= ~MAC_FLAG_INITIALIZED; */
1054 mac_port_check_service (struct label *subj, struct label *obj,
1064 mac_port_label_compute(struct label *subj, struct label *obj,
1065     const char *s, struct label *out)
1085  * label namespace or "*" for all namespaces.  Returns ENOENT if no policy
1089 mac_label_externalize(size_t mpo_externalize_off, struct label *label,
1097 	int (*mpo_externalize)(struct label *, char *, struct sbuf *);
1131 			error = mpo_externalize(label, mle->mle_name, sb);
1136 				 * If a policy doesn't have a label to
1139 				 * multiple label elements for some
1170  * Get the external forms of labels from all policies, for all label
1176 mac_externalize(size_t mpo_externalize_off, struct label *label,
1209 		error = mac_label_externalize(mpo_externalize_off, label,
1226  * Have all policies set the internal form of a label, for a single
1227  * label namespace.
1230 mac_label_internalize(size_t mpo_internalize_off, struct label *label,
1237 	int (*mpo_internalize)(struct label *, char *, char *);
1257 			error = mpo_internalize(label, element_name,
1279 mac_internalize(size_t mpo_internalize_off, struct label *label,
1292 		error = mac_label_internalize(mpo_internalize_off, label,
1409 	struct label *intlabel;
1545  *	Get login context label.  A login context associates a BSD process
1618 	struct label *intlabel;
1711 	struct label *intlabel;
1815 	struct label *intlabel;
1907 	struct label *intlabel;
2016 	struct label *intlabel;
2165 	struct label *label;
2196 	label = mp->mnt_mntlabel;
2198 	error = mac_mount_label_externalize(label, elements, buffer,
2210  * __mac_get_mount: Get mount point label information for a given pathname